Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>
GitHub

froxlor/froxlor

<= 2.2.0-rc3

2024-08-23 18:54:33
nukeviet Deserialization of Untrusted Data vulnerability
GitHub

nukeviet/nukeviet

<= 4.5

2024-08-21 20:09:00
Concrete CMS vulnerable to Stored Cross-site Scripting
GitHub

concrete5/concrete5

>= 9.0.0RC1, < 9.3.3

2024-08-20 20:02:06
Concrete CMS Stored Cross-site Scripting vulnerability
GitHub

concrete5/concrete5

>= 9.0.0RC1, < 9.3.3 · < 8.5.18

2024-08-19 22:08:02
Bolt CMS Cross-site Scripting vulnerability
GitHub

bolt/bolt

<= 3.7.1

2024-08-19 21:49:30
Automad arbitrary file upload vulnerability
GitHub

automad/automad

<= 2.0.0-alpha.5 · < 2.0.0-alpha.5

2024-08-19 21:03:26
Cross-Site Request Forgery (CSRF) in automad/automad
GitHub

automad/automad

< 2.0.0-alpha.1 · <= 1.10.9

2024-08-19 20:52:33
Cross site scripting in automad/automad
GitHub

automad/automad

< 1.8.0

2024-08-19 20:49:57
Cross site scripting in moodle
GitHub

moodle/moodle

<= 3.10.9

2024-08-15 22:21:39
Persistent Cross-site Scripting in eZ Platform Rich Text Field Type
GitHub

ezsystems/ezplatform-richtext

>= 3.3.0, < 3.3.40

2024-08-14 18:08:23
Persistent Cross-site Scripting in Ibexa RichText Field Type
GitHub

ibexa/fieldtype-richtext

>= 4.6.0, < 4.6.10

2024-08-14 18:08:20
Concrete CMS Stored XSS in getAttributeSetName
GitHub

concrete5/concrete5

>= 9.0.0, < 9.3.3 · < 8.5.18

2024-08-08 20:40:13
Shopware vulnerable to blind SQL-injection in DAL aggregations
GitHub

shopware/core

>= 6.6.0.0, <= 6.6.5.0 · <= 6.5.8.12

2024-08-08 14:53:58
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
GitHub

shopware/core

>= 6.6.0.0, <= 6.6.5.0 · <= 6.5.8.12

2024-08-08 14:50:12
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
GitHub

shopware/core

>= 6.6.0.0, <= 6.6.5.0 · <= 6.5.8.12

2024-08-08 14:48:03
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
GitHub

shopware/core

>= 6.6.0.0, <= 6.6.5.0 · <= 6.5.8.12

2024-08-08 14:42:59
Microweber Cross Site Scripting (XSS) vulnerability
GitHub

microweber/microweber

<= 2.0.16

2024-08-08 13:26:09
Magento Open Source Incorrect Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:43:56
Magento Open Source Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:43:49
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:43:36
Magento Open Source Improper Authentication vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:43:01
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 17:42:50
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.6-p1, < 2.4.6-p6 · >= 2.4.5-p1, < 2.4.5-p8 · < 2.4.4-p9 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-08-07 15:58:30
Microweber Reflected Cross-site scripting (XSS) vulnerability
GitHub

microweber/microweber

< 2.0.16

2024-08-06 16:07:54
Microweber Cross Site Scripting (XSS) vulnerability
GitHub

microweber/microweber

<= 2.0.16

2024-08-05 21:19:51
dcat-admin Cross Site Scripting vulnerability
GitHub

dcat/laravel-admin

<= 2.1.3

2024-08-05 21:19:16
ipl/web's `ipl\Web\Common\CsrfCounterMeasure` is susceptible to CSRF
GitHub

ipl/web

< 0.10.1

2024-08-05 14:39:10
Bootstrap vulnerable to Cross-Site Scripting (XSS)
GitHub

twbs/bootstrap

>= 4.0.0, < 4.1.2 · >= 2.3.0, < 3.4.0

2024-08-02 19:14:06
ICEcoder vulnerable to Cross Site Scripting
GitHub

icecoder/icecoder

<= 8.1

2024-08-02 16:09:34
Webtrees Path Traversal vulnerability
GitHub

fisharebest/webtrees

<= 2.1.18

2024-08-02 16:04:11
Dolibarr ERP CRM vulnerable to remote code execution (RCE)
GitHub

dolibarr/dolibarr

< 19.0.2

2024-08-02 15:56:45
ICEcoder Path Traversal vulnerability
GitHub

icecoder/icecoder

<= 8.1

2024-08-02 13:35:27
Concrete CMS vulnerable to Stored Cross-site Scripting
GitHub

concrete5/concrete5

>= 9.0.0, <= 9.3.2

2024-08-02 13:27:51
ICEcoder vulnerable to Cross Site Scripting
GitHub

icecoder/icecoder

<= 8.1

2024-08-02 13:19:59
Cross-site Scripting in Backdrop CMS
GitHub

backdrop/backdrop

< 1.24.2

2024-08-02 10:31:21
Bootstrap Cross-Site Scripting (XSS) vulnerability
GitHub

twbs/bootstrap

>= 2.0.0, <= 3.4.1

2024-08-01 21:28:40
Bootstrap Cross-site Scripting vulnerability
GitHub

twbs/bootstrap

>= 4.0.0-beta, < 4.0.0-beta.2 · >= 2.0.4, < 3.4.0

2024-08-01 21:03:45
Bootstrap Cross-site Scripting vulnerability
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.23 · >= 9.0.0, < 9.5.4 · >= 4.0.0, < 4.1.2

2024-08-01 21:03:39
Bootstrap Cross-site Scripting vulnerability
GitHub

twbs/bootstrap

>= 4.0.0, < 4.1.2 · >= 2.3.0, < 3.4.0

2024-08-01 21:03:34
XSS vulnerability that affects bootstrap
GitHub

twbs/bootstrap

< 3.4.0

2024-08-01 21:03:26
bootstrap Cross-site Scripting vulnerability
GitHub

twbs/bootstrap

< 3.4.0

2024-08-01 21:03:21
Bootstrap Vulnerable to Cross-Site Scripting
GitHub

twbs/bootstrap

>= 4.0.0, < 4.3.1 · >= 3.0.0, < 3.4.1

2024-08-01 21:03:14
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
GitHub

ezsystems/ezplatform-admin-ui

>= 3.3.0, < 3.3.39

2024-07-31 17:02:00
Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
GitHub

ibexa/admin-ui

>= 4.6.0-beta1, < 4.6.9

2024-07-31 15:27:13
Studio 42 elFinder vulnerable to Incorrect Access Control
GitHub

studio-42/elfinder

<= 2.1.64

2024-07-30 17:12:00
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
GitHub

pimcore/admin-ui-classic-bundle

<= 1.5.1

2024-07-30 14:52:52
RaspAP allows an attacker to escalate privileges
GitHub

billz/raspap-webgui

<= 3.1.4

2024-07-29 17:01:25
Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs
GitHub

openmage/magento-lts

< 20.10.1

2024-07-29 16:38:21
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
GitHub

admidio/admidio

< 4.3.10

2024-07-29 16:32:33
Admidio has Blind SQL Injection in ecard_send.php
GitHub

admidio/admidio

< 4.3.9

2024-07-29 16:31:47
« Previous Next »

Showing 801 to 850 of 4745 results

1 2 ... 14 15 16 17 18 19 20 ... 94 95