Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

eZ Platform Bundled jQuery affected by CVE-2019-11358
GitHub

ezsystems/ezplatform-admin-ui-assets

>= 4.0.0, < 4.2.0

2024-05-15 21:08:42
Cross-site Scripting in eZFind spellcheck
GitHub

ezsystems/ezfind-ls

>= 2017.12.0, < 2017.12.0.1 · >= 5.4.0, < 5.4.11.1 · >= 5.3.0, < 5.3.6.1

2024-05-15 21:07:56
ezsystems/ez-support-tools Failing access control in system info view
GitHub

ezsystems/ez-support-tools

>= 2.2.0, < 2.2.3

2024-05-15 21:07:07
Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS
GitHub

ezsystems/demobundle

>= 5.4.0, < 5.4.6.1

2024-05-15 21:06:29
Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS
GitHub

ezsystems/ezdemo-ls-extension

>= 5.4.0, < 5.4.2.1

2024-05-15 21:06:25
endroid/qr-code-bundle File Disclosure via logo_path query parameter
GitHub

endroid/qr-code-bundle

< 3.4.2

2024-05-15 21:05:19
Path Disclosure within joomla/filesystem class
GitHub

joomla/filesystem

>= 2.0.0, < 2.0.1 · < 1.6.2

2024-05-15 21:04:42
Path Traversal within joomla/archive tar class
GitHub

joomla/archive

>= 2.0.0, < 2.0.1 · < 1.1.12

2024-05-15 21:04:32
Variable Tampering within joomla/input class
GitHub

joomla/input

>= 2.0.0, < 2.0.2

2024-05-15 21:04:18
Cross-site Scripting (XSS) within joomla/filter class
GitHub

joomla/filter

>= 2.0.0, < 2.0.1 · < 1.4.4

2024-05-15 21:04:02
Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party library
GitHub

drupal/drupal

>= 9.0.0, < 9.1.12 · >= 8.0.0, < 8.9.16 · >= 9.2.0, < 9.2.4

2024-05-15 21:02:57
Drupal core Arbitrary PHP code execution
GitHub

drupal/drupal

>= 8.9.0, < 8.9.10 · >= 8.0.0, < 8.8.12 · >= 9.0.0, < 9.0.9 · >= 7.0.0, < 7.75

2024-05-15 21:02:37
Drupal core uses a vulnerable Third-party library CKEditor
GitHub

drupal/drupal

>= 8.0.0, < 8.7.12 · >= 8.8.0, < 8.8.4

2024-05-15 21:02:02
Drupal core Open Redirect vulnerability
GitHub

drupal/drupal

>= 7.0.0, < 7.70

2024-05-15 21:01:42
Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1 · >= 7.0.0, < 7.69

2024-05-15 21:00:52
Drupal core Access control bypass
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 21:00:37
Drupal core Denial of Service
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:59:58
Drupal core Remote Code Execution
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8 · >= 7.0, < 7.60

2024-05-15 20:59:27
Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:57:21
Drupal Malicious file upload with filenames stating with dot
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:55:23
Drupal Anonymous Open Redirect
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:54:52
Drupal Content moderation Access bypass
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:53:26
Drupal External URL injection through URL aliases leading to Open Redirect
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8 · >= 7.0, < 7.60

2024-05-15 20:52:46
Drupal core Cross-site Scripting (XSS) vulnerability in ckeditor
GitHub

drupal/core

>= 8.0.0, < 8.8.10 · >= 9.0.0, < 9.0.6 · >= 8.9.0, < 8.9.6

2024-05-15 20:52:05
Drupal core Cross-site Scripting (XSS) vulnerability
GitHub

drupal/core

>= 9.0.0, < 9.0.12 · >= 8.0.0, < 8.9.14 · >= 9.1.0, < 9.1.7 · >= 7.0.0, < 7.80

2024-05-15 20:51:57
Drupal core Cross-Site Scripting (XSS) vulnerabilities
GitHub

drupal/core

>= 9.1.0, < 9.1.12 · >= 8.0.0, < 8.9.18 · >= 9.2.0, < 9.2.4

2024-05-15 20:51:27
Drupal core Arbitrary PHP code execution
GitHub

drupal/core

>= 8.9.0, < 8.9.10 · >= 8.0.0, < 8.8.12 · >= 9.0.0, < 9.0.9 · >= 7.0.0, < 7.75

2024-05-15 20:50:25
Drupal core Open Redirect vulnerability
GitHub

drupal/core

>= 7.0.0, < 7.70

2024-05-15 20:49:00
Drupal core uses a vulnerable Third-party library CKEditor
GitHub

drupal/core

>= 8.0.0, < 8.7.12 · >= 8.8.0, < 8.8.4

2024-05-15 20:48:21
Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar
GitHub

drupal/core

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1 · >= 7.0.0, < 7.69

2024-05-15 20:45:29
Drupal core Access bypass
GitHub

drupal/core

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:44:17
Drupal core unrestricted file upload
GitHub

drupal/core

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:43:00
Drupal core Denial of Service
GitHub

drupal/core

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:38:39
Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution
GitHub

drupal/core

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:37:18
Drupal core Remote Code Execution
GitHub

drupal/core

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8 · >= 7.0, < 7.60

2024-05-15 20:27:24
Drupal Anonymous Open Redirect
GitHub

drupal/core

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:26:51
Drupal External URL injection through URL aliases leading to Open Redirect
GitHub

drupal/core

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8 · >= 7.0, < 7.60

2024-05-15 20:24:17
Drupal Content moderation Access bypass
GitHub

drupal/core

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:23:04
Guard bypass in Eloquent models affecting Laravel illuminate database component
GitHub

illuminate/database

>= 6.0.0, < 6.18.34 · >= 5.5.0, <= 5.5.44 · >= 7.0.0, < 7.23.2

2024-05-15 20:22:54
doctrine/orm Regression in Query Parenthesis can have Security Implications
GitHub

doctrine/orm

>= 2.8.3, < 2.8.4

2024-05-15 20:19:47
Doctrine SQL injection vulnerability
GitHub

doctrine/orm

>= 2.0.0, < 2.0.3 · >= 1.0.0, < 1.2.4

2024-05-15 20:14:16
doctrine/doctrine-module zero-valued authentication credentials vulnerability
GitHub

doctrine/doctrine-module

< 0.7.2

2024-05-15 18:45:13
Doctrine DBAL SQL injection possibility
GitHub

doctrine/dbal

>= 2.1.0, < 2.1.2 · >= 2.0.0, < 2.0.8

2024-05-15 18:42:21
datadog/dd-trace Circumvents open_basedir INI directive
GitHub

datadog/dd-trace

>= 0.30.0, < 0.30.2

2024-05-15 18:33:21
contao/core PHP object injection vulnerability allows for arbitrary code execution
GitHub

contao/core

>= 2.0.0, < 2.11.14 · >= 3.0.0, < 3.2.5

2024-05-15 18:31:07
contao/core Insufficient input validation allows for code injection and remote execution
GitHub

contao/core

>= 2.0.0, < 2.11.17 · >= 3.0.0, < 3.2.9

2024-05-15 18:31:03
Contao Cross-site Scripting vulnerabililty
GitHub

contao/core

>= 3.0.0, < 3.5.32

2024-05-15 18:12:54
Magento SQL injection vulnerability
GitHub

magento/community-edition

>= 2.3.0, < 2.3.2-p1 · >= 2.2.0, < 2.2.10

2024-05-15 18:11:33
codeigniter/framework SQL injection in ODBC database driver
GitHub

codeigniter/framework

< 3.1.0

2024-05-15 18:09:42
Inadequate XSS Prevention in CodeIgniter/Framework Security Library
GitHub

codeigniter/framework

< 3.0.3

2024-05-15 18:08:28
« Previous Next »

Showing 1151 to 1200 of 4580 results

1 2 ... 21 22 23 24 25 26 27 ... 91 92