Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

Moodle Cross-Site Request Forgery (CSRF)
GitHub

moodle/moodle

>= 3.0, < 3.0.10 · >= 2.7, < 2.7.20 · >= 3.2, < 3.2.3 · >= 3.1, < 3.1.6

2024-04-23 22:41:45
Moodle Exposure of Sensitive Information to an Unauthorized Actor
GitHub

moodle/moodle

>= 3.10.0, < 3.10.4 · >= 3.9.0, < 3.9.7 · >= 3.8.0, < 3.8.9

2024-04-23 22:41:15
Moodle Information Disclosure vulnerability
GitHub

moodle/moodle

>= 3.10, < 3.10.4 · >= 3.5, < 3.5.18 · >= 3.9, < 3.9.7 · >= 3.8, < 3.8.9

2024-04-23 22:41:12
moodle Improper Access Control
GitHub

moodle/moodle

>= 3.7.0, < 3.7.1 · >= 3.6.0, < 3.6.5 · < 3.5.7

2024-04-23 22:41:10
moodle Improper Access Control
GitHub

moodle/moodle

>= 3.7.0, < 3.7.1 · >= 3.6.0, < 3.6.5 · < 3.5.7

2024-04-23 22:41:10
phpWhois arbitrary code execution via a crafted whois record
GitHub

jsmitty12/phpwhois

<= 4.3.1 · <= 4.3.0 · <= 4.2.6 · <= 4.2.5 · <= 1.0.0 · < 5.1.0

2024-04-23 22:40:25
FrozenNode Laravel-Administrator unrestricted file upload
GitHub

frozennode/administrator

<= 5.0.12

2024-04-23 22:39:52
Zend Framework SQL injection vulnerability
GitHub

zendframework/zendframework1

>= 1.12.0, < 1.12.9 · >= 2.1.0, < 2.1.99 · >= 2.0.0, < 2.0.99 · >= 2.3.0, < 2.3.3 · >= 2.2.0, < 2.2.8

2024-04-23 22:39:04
Drupal Users without "Administer comments" can set comment visibility on nodes they can edit
GitHub

drupal/drupal

>= 8.0.0, < 8.1.10

2024-04-23 22:37:19
Drupal cross-site scripting vulnerability
GitHub

drupal/core

>= 8.4.0, < 8.4.5 · >= 7.0, < 7.57

2024-04-23 22:36:54
Drupal Comment reply form allows access to restricted content
GitHub

drupal/core

>= 8.4.0, < 8.4.5 · >= 7.0, < 7.57

2024-04-23 22:36:49
Drupal Core Remote Code Execution Vulnerability
GitHub

drupal/core

>= 8.5.0, < 8.5.1 · >= 8.4.0, < 8.4.6 · >= 8.5, < 8.5.1 · >= 8.4, < 8.4.6 · >= 8.0, < 8.3.9 · >= 7.0, < 7.58

2024-04-23 22:36:49
Drupal Core Remote Code Execution Vulnerability
GitHub

drupal/core

>= 8.5, < 8.5.3 · >= 8.0, < 8.4.8 · >= 7.0, < 7.59

2024-04-23 22:36:10
Drupal Cross-Site Scripting vulnerability
GitHub

drupal/core

= 6.20

2024-04-23 22:35:51
Drupal Settings Tray access bypass
GitHub

drupal/core

>= 8.4.0, < 8.4.5

2024-04-23 22:35:39
Drupal access bypass vulnerability
GitHub

drupal/core

>= 7.0, < 7.57

2024-04-23 22:34:14
Drupal access bypass vulnerability
GitHub

drupal/core

>= 8.4.0, < 8.4.5

2024-04-23 22:34:06
Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions
GitHub

drupal/core

>= 8.0, < 8.3.7

2024-04-23 22:33:47
Drupal Remote code execution
GitHub

drupal/core

>= 8.0, < 8.2.7

2024-04-23 22:32:49
Drupal REST API can bypass comment approval
GitHub

drupal/core

>= 8.0, < 8.3.7

2024-04-23 22:32:44
Drupal core access bypass vulnerability
GitHub

drupal/core

>= 8.0, < 8.3.4 · >= 7.0, < 7.56

2024-04-23 22:30:59
Drupal Core Cross-site scripting vulnerability
GitHub

drupal/core

>= 8.8.0, < 8.8.10 · >= 9.0.0, < 9.0.6 · >= 8.9.0, < 8.9.6

2024-04-23 22:30:54
Drupal Core Access bypass vulnerability
GitHub

drupal/core

>= 8.8.0, < 8.8.10 · >= 9.0.0, < 9.0.6 · >= 8.9.0, < 8.9.6

2024-04-23 22:30:49
Drupal Core Access bypass vulnerability
GitHub

drupal/core

>= 9.0.0, < 9.0.1 · >= 8.9.0, < 8.9.1 · >= 8.8.0, < 8.8.8

2024-04-23 22:30:44
Drupal Core Arbitrary PHP code execution vulnerability
GitHub

drupal/core

>= 9.0.0, < 9.0.1 · >= 8.9.0, < 8.9.1 · >= 8.8.0, < 8.8.8

2024-04-23 22:30:39
Drupal Core Open Redirect vulnerability
GitHub

drupal/core

>= 7.0.0, < 7.70

2024-04-23 22:29:41
Drupal Core Cross-site scripting vulnerability
GitHub

drupal/core

>= 8.8.0, < 8.8.10 · >= 9.0.0, < 9.0.6 · >= 8.9.0, < 8.9.6 · >= 7.0.0, < 7.73

2024-04-23 22:29:33
Drupal SQL Injection vulnerability
GitHub

drupal/core

= 6.20

2024-04-23 22:29:24
Drupal CRLF injection vulnerability in the drupal_set_header function
GitHub

drupal/core

>= 6.0, < 6.38

2024-04-23 22:29:19
Drupal Form API ignores access restrictions on submit buttons
GitHub

drupal/core

>= 6.0, < 6.38

2024-04-23 22:28:48
Drupal Brute force amplification attacks via XML-RPC
GitHub

drupal/core

>= 7.0, < 7.43 · >= 6.0, < 6.38

2024-04-23 22:28:03
Drupal Open redirect vulnerability in the drupal_goto function
GitHub

drupal/core

>= 6.0, < 6.38

2024-04-23 22:20:03
Drupal File upload access bypass and denial of service
GitHub

drupal/core

>= 8.0, < 8.0.4 · >= 7.0, < 7.43

2024-04-23 22:20:03
Drupal arbitrary code execution
GitHub

drupal/core

>= 6.0, < 6.38

2024-04-23 22:18:10
Drupal Cross-site scripting (XSS) vulnerability
GitHub

drupal/core

>= 8.0, < 8.1.10

2024-04-23 22:17:48
Drupal Unprivileged access to config export
GitHub

drupal/core

>= 8.0, < 8.1.10

2024-04-23 22:17:37
Drupal sensitive information disclosure
GitHub

drupal/core

>= 8.0, < 8.2.3 · >= 7.0, < 7.52

2024-04-23 22:17:27
Drupal cross site scripting vulnerability
GitHub

drupal/core

>= 8.0, < 8.4.0 · >= 7.0, < 7.57

2024-04-23 22:16:24
Drupal external link injection vulnerability
GitHub

drupal/core

>= 7.0, < 7.57

2024-04-23 22:16:17
OpenCart Cross-Site Request Forgery (CSRF)
GitHub

opencart/opencart

= 3.0.3.6

2024-04-23 17:28:30
OpenCart Cross-Site Request Forgery (CSRF)
GitHub

opencart/opencart

<= 3.0.2.0

2024-04-23 17:28:25
OpenCart Path Traversal
GitHub

opencart/opencart

<= 3.0.2.0

2024-04-23 17:28:20
OpenCart Path Traversal
GitHub

opencart/opencart

<= 3.0.2.0

2024-04-23 17:28:17
QuickApps CMS Cross-site Scripting
GitHub

quickapps/cms

<= 2.0.0-beta1

2024-04-23 17:27:30
QuickAppsCMS Cross-Site Request Forgery (CSRF)
GitHub

quickapps/cms

= 2.0.0-beta2

2024-04-23 17:26:56
QuickAppsCMS Cross-Site Request Forgery (CSRF)
GitHub

quickapps/cms

<= 2.0.0-beta2

2024-04-23 17:26:50
Paymorrow Improper Input Validation vulnerability
GitHub

oxid-esales/paymorrow-module

>= 2.0.0, < 2.0.1 · >= 1.0.0, < 1.0.2

2024-04-23 17:25:44
LightSAML Incorrect Access Control vulnerability
GitHub

lightsaml/lightsaml

< 1.3.5

2024-04-23 17:25:36
Magento Improper input validation vulnerability
GitHub

magento/community-edition

>= 2.4.0, < 2.4.3-p3 · < 2.3.7-p4 · = 2.4.4

2024-04-23 17:24:34
MODX Revolution blind SQL injection
GitHub

modx/revolution

>= 2.0.0, <= 2.5.6

2024-04-23 17:23:44
« Previous Next »

Showing 1301 to 1350 of 4252 results

1 2 ... 24 25 26 27 28 29 30 ... 85 86