Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

TokenController formName not sanitized in hidden input
GitHub

sulu/form-bundle

>= 2.0.0, < 2.5.3

2024-06-06 21:36:41
Password hash exposed in CraftCMS two factor authentication plugin
GitHub

born05/craft-twofactorauthentication

>= 3.3.1, < 3.3.4

2024-06-06 19:13:51
Improper Authentication in CraftCMS two factor authentication plugin
GitHub

born05/craft-twofactorauthentication

< 3.3.4

2024-06-06 19:12:08
typo3 Security fix for Flow Swift Mailer package
GitHub

typo3/swiftmailer

>= 4.1.0, < 4.1.99 · >= 5.4.0, < 5.4.5

2024-06-05 20:47:53
Insecure Unserialize Vulnerability in FLOW3
GitHub

typo3/flow

>= 1.0.0, < 1.0.4

2024-06-05 20:47:07
typo3 Information Disclosure Security Note
GitHub

typo3/neos

>= 4.2.0, < 4.2.12 · >= 4.1.0, < 4.1.16 · >= 4.0.0, < 4.0.17 · >= 3.3.0, < 3.3.23 · >= 3.2.0, < 3.2.14 · >= 3.1.0, < 3.1.18 · >= 3.0.0, < 3.0.20 · >= 2.3.0, < 2.3.99 · >= 4.3.0, < 4.3.3

2024-06-05 18:33:03
Typo3 Arbitrary file upload and XML External Entity processing
GitHub

typo3/flow

>= 3.0.0, < 3.0.1 · >= 2.3.0, < 2.3.7

2024-06-05 18:26:36
By-passing Protection of PharStreamWrapper Interceptor
GitHub

typo3/phar-stream-wrapper

>= 3.0.0, < 3.0.1 · >= 1.0.0, < 2.0.1

2024-06-05 17:30:02
Time-Based Information Disclosure Vulnerability in Flow
GitHub

typo3/flow

>= 3.0.0, < 3.0.10 · >= 2.3.0, < 2.3.16 · >= 3.3.0, < 3.3.5 · >= 3.2.0, < 3.2.7 · >= 3.1.0, < 3.1.7

2024-06-05 17:28:47
Privilege Escalation in TYPO3 Neos
GitHub

typo3/neos

>= 1.2.0, < 1.2.3 · >= 1.1.0, < 1.1.3

2024-06-05 17:28:06
Flow Bugfix Releases for Entity Security
GitHub

typo3/flow

>= 3.3.0, < 3.3.13 · >= 3.2.0, < 3.2.13 · >= 3.1.0, < 3.1.10 · >= 3.0.0, < 3.0.12 · >= 4.0.0, < 4.0.6

2024-06-05 17:24:57
Cross-Site Scripting (XSS) vulnerabilities in Neos
GitHub

typo3/neos

>= 1.2.0, < 1.2.13 · >= 2.0.0, < 2.0.4

2024-06-05 17:24:57
Typo3 Cross-Site Scripting in Language Pack Handling
GitHub

typo3/cms

>= 9.0.0, < 9.5.4

2024-06-05 17:23:20
Typo3 Broken Access Control in Import Module
GitHub

typo3/cms

>= 9.0.0, < 9.5.8

2024-06-05 17:22:53
Typo3 Information Disclosure in Page Tree
GitHub

typo3/cms

>= 9.0.0, < 9.5.6

2024-06-05 17:21:20
Typo3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
GitHub

typo3/cms

>= 8.0.0, < 8.7.27 · >= 9.0.0, < 9.5.8

2024-06-05 17:19:27
Typo3 Security Misconfiguration in Frontend Session Handling
GitHub

typo3/cms

>= 8.0.0, < 8.7.27 · >= 9.0.0, < 9.5.8

2024-06-05 17:13:00
Typo3 Security Misconfiguration in User Session Handling
GitHub

typo3/cms

>= 8.0.0, < 8.7.25 · >= 9.0.0, < 9.5.6

2024-06-05 17:10:39
Typo3 Information Disclosure in Backend User Interface
GitHub

typo3/cms

>= 8.0.0, < 8.7.27 · >= 9.0.0, < 9.5.8

2024-06-05 17:10:09
Typo3 Information Disclosure in User Authentication
GitHub

typo3/cms

>= 9.0.0, < 9.5.6

2024-06-05 17:09:31
Cross-Site Scripting in TYPO3 CMS Backend
GitHub

typo3/cms

>= 8.0.0, < 8.7.5

2024-06-05 17:07:16
Cross-Site Scripting in TYPO3 CMS
GitHub

typo3/cms

>= 7.6.0, < 7.6.16 · >= 8.0.0, < 8.6.1

2024-06-05 17:05:49
Insecure Unserialize in TYPO3 Backend
GitHub

typo3/cms

>= 7.6.0, < 7.6.13 · >= 6.2.0, < 6.2.29 · >= 8.0.0, < 8.4.1

2024-06-05 17:04:44
Cache Flooding in TYPO3 Frontend
GitHub

typo3/cms

>= 7.6.0, < 7.6.11 · >= 6.2.0, < 6.2.27 · >= 8.0.0, < 8.3.1

2024-06-05 16:55:38
Authentication Bypass in TYPO3 Frontend
GitHub

typo3/cms

>= 8.2.0, < 8.6.1

2024-06-05 16:55:02
Authentication Bypass in TYPO3 CMS
GitHub

typo3/cms

>= 8.0.0, < 8.7.17 · >= 7.0.0, < 7.6.30 · >= 9.0.0, < 9.3.2

2024-06-05 16:52:47
Information Disclosure in TYPO3 CMS
GitHub

typo3/cms

>= 7.6.0, < 7.6.22 · >= 8.0.0, < 8.7.5

2024-06-05 16:43:52
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS
GitHub

typo3/cms

>= 8.0.0, < 8.7.17 · >= 7.0.0, < 7.6.30 · >= 9.0.0, < 9.3.2

2024-06-05 16:41:49
Information Disclosure in TYPO3 CMS
GitHub

typo3/cms

>= 7.6.0, < 7.6.22 · >= 8.0.0, < 8.7.5

2024-06-05 15:11:37
Privilege Escalation & SQL Injection in TYPO3 CMS
GitHub

typo3/cms

>= 8.5.0, < 8.7.17 · >= 9.0.0, < 9.3.2

2024-06-05 15:10:20
TYPO3 Remote Code Execution in third party library swiftmailer
GitHub

typo3/cms

>= 7.6.0, < 7.6.15 · >= 6.2.0, < 6.2.30 · >= 8.0.0, < 8.5.1

2024-06-05 15:08:05
Arbitrary Code Execution in TYPO3 CMS
GitHub

typo3/cms

>= 7.6.0, < 7.6.22 · >= 8.0.0, < 8.7.5

2024-06-05 15:07:10
Insecure Deserialization in TYPO3 CMS
GitHub

typo3/cms

>= 8.5.0, < 8.7.17 · >= 9.0.0, < 9.3.2

2024-06-05 15:06:19
Cross-Site Scripting (XSS) vulnerability in typolinks
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26 · >= 8.0.0, < 8.2.1

2024-06-05 15:04:24
Cross-Site Scripting (XSS) in TYPO3 Backend
GitHub

typo3/cms

>= 7.6.0, < 7.6.11 · >= 6.2.0, < 6.2.27 · >= 8.0.0, < 8.3.1

2024-06-05 15:03:29
Cross-Site Scripting in third party library mso/idna-convert
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 8.0.0, < 8.2.1

2024-06-05 15:02:40
Information Disclosure in TYPO3 Backend
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26 · >= 8.0.0, < 8.2.1

2024-06-05 15:01:47
SQL Injection in TYPO3 Frontend Login
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26

2024-06-05 14:23:21
Missing Access Check in TYPO3 CMS
GitHub

typo3/cms

>= 6.2.0, < 6.2.25 · >= 8.0.0, < 8.1.1 · >= 7.6.0, < 7.6.8

2024-06-05 14:22:27
Insecure Unserialize in TYPO3 Import/Export
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26 · >= 8.0.0, < 8.2.1

2024-06-05 14:21:13
Cross-Site Scripting in TYPO3 Backend
GitHub

typo3/cms

>= 7.6.0, < 7.6.10 · >= 6.2.0, < 6.2.26 · >= 8.0.0, < 8.2.1

2024-06-05 14:19:40
Privilege Escalation in TYPO3 CMS
GitHub

typo3/cms

>= 6.2.0, < 6.2.20 · >= 8.0.0, < 8.0.1 · >= 7.6.0, < 7.6.5

2024-06-05 14:18:58
Cross-Site Scripting in TYPO3 Backend
GitHub

typo3/cms

>= 6.2.0, < 6.2.20 · >= 8.0.0, < 8.0.1 · >= 7.6.0, < 7.6.5

2024-06-05 14:17:47
Authentication Bypass in TYPO3 CMS
GitHub

typo3/cms

>= 6.2.0, < 6.2.20 · >= 8.0.0, < 8.0.1 · >= 7.6.0, < 7.6.5

2024-06-05 14:17:21
Digital products download without proper payment status check
GitHub

aimeos/ai-client-html

>= 2023.04.1, < 2023.10.14 · >= 2022.04.1, < 2022.10.12 · >= 2021.04.1, < 2021.10.21 · >= 2020.04.1, < 2020.10.27 · >= 2024.04.1, < 2024.04.4

2024-06-05 13:30:57
Remote code execution in web server context
GitHub

aimeos/aimeos-core

>= 2024.04.1, < 2024.04.5

2024-06-05 13:29:48
Vulnerable embedded jQuery Version
GitHub

pimcore/admin-ui-classic-bundle

<= 1.4.2

2024-06-05 13:28:37
Reflected Cross-Site Scripting (XSS) in Dolibarr
GitHub

dolibarr/dolibarr

< 19.0.2

2024-06-04 18:23:50
Moodle Unsanitized HTML in site log for config_log_created
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 17:37:36
Moodle CSRF risk in analytics management of models
GitHub

moodle/moodle

>= 4.3.0, < 4.3.4 · >= 4.2.0, < 4.2.7 · < 4.1.10

2024-06-04 17:36:36
« Previous Next »

Showing 801 to 850 of 4580 results

1 2 ... 14 15 16 17 18 19 20 ... 91 92