Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

Moodle allows attackers to trigger the generation of arbitrary messages
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-25 20:29:28
Moodle does not provide charset information in HTTP headers
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-25 20:28:15
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests
GitHub

moodle/moodle

>= 2.1.0, < 2.1.10 · >= 2.3.0, < 2.3.4 · >= 2.2.0, < 2.2.7 · = 2.4.0

2024-01-25 20:27:59
Arbitrary Code Execution in Processwire
GitHub

processwire/processwire

<= 3.0.210

2024-01-24 21:54:17
Moodle allows attacks to obtain sensitive information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:42:56
Moodle allows attackers to cause a denial of service
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:42:35
Moodle does not consider the moodle/tag:edit capability before adding a tag
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:42:14
Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:41:51
Moodle allows attackers to remove wiki pages
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:38:36
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:30:58
Moodle allows attackers to upload files containing JavaScript
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:30:19
Moodle does not verify group permissions
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:29:46
Moodle allows attackers to obtain sensitive information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:29:16
Moodle allows attackers to bypass the mod/lti:view capability requirement
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:28:34
Moodle exposes hidden grades to students
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3

2024-01-24 21:27:59
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:27:10
Moodle does not enforce the moodle/site:accessallgroups capability requirement
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · < 2.5.7

2024-01-24 21:24:26
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:23:38
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:21:48
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7

2024-01-24 21:20:53
Moodle allows attackers to obtain username and course information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:20:17
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:17:35
Moodle vulnerable to PHP object injection attacks
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:17:07
Moodle attackers to modify grade metadata
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2

2024-01-24 21:16:30
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 21:14:12
SQL Injection in Admin download files as zip
GitHub

pimcore/admin-ui-classic-bundle

>= 1.0.0, < 1.3.2

2024-01-24 20:55:01
Host header injection in the password reset
GitHub

pimcore/admin-ui-classic-bundle

< 1.2.3

2024-01-24 20:55:01
Moodle Arbitrary File Read via XML External Entity vulnerability
GitHub

moodle/moodle

>= 2.4.0, <= 2.4.10 · >= 2.6.0, <= 2.6.3 · >= 2.5.0, <= 2.5.6 · <= 2.4.10 · = 2.7.0

2024-01-24 18:35:54
Moodle does not check for the moodle/course:viewhiddencourses capability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3

2024-01-24 16:22:37
Moodle does not properly restrict file access
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:21:07
Moodle creates a MoodleMobile web-service token with an infinite lifetime
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:20:37
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:20:14
Moodle allows attackers to modify the visibility of a badge
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5

2024-01-24 16:19:46
Moodle's time-validation implementation allows bypassing intended restrictions
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:18:21
Moodle cross-site request forgery (CSRF) vulnerability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:18:06
Moodle places a session key in a URL
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:17:51
Moodle allows attackers to obtain sensitive information
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:17:31
Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial
GitHub

composer/composer

>= 2.0.0-alpha1, < 2.0.13 · >= 2.0, < 2.0.13 · < 1.10.22

2024-01-24 10:46:03
Missing input validation can lead to command execution in composer
GitHub

composer/composer

>= 2.3.0, < 2.3.5 · >= 2.0, < 2.2.12 · >= 2.3, < 2.3.5 · < 1.10.26

2024-01-24 10:22:26
No permission checks for editing/deleting records with CSV import form
GitHub

silverstripe/admin

>= 1.0.0, < 1.13.19 · >= 2.0.0, < 2.1.8

2024-01-23 20:09:52
Typo3 Backend XSS Vulnerability
GitHub

typo3/cms

>= 4.1.0, < 4.1.10 · >= 4.2.0, < 4.2.6 · >= 3.3.0, < 3.9.0 · >= 4.0, < 4.0.12 · = 4.3alpha1

2024-01-23 18:24:10
phpMyAdmin HTTP Response Splitting Vulnerability
GitHub

phpmyadmin/phpmyadmin

< 3.1.3.1

2024-01-23 18:12:58
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
GitHub

typo3/cms

>= 4.2.0, <= 4.2.3 · >= 4.1.0, <= 4.1.7 · >= 4.0.0, <= 4.0.9

2024-01-23 18:11:53
Moodle does not properly restrict access
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-23 17:51:56
Moodle allows bypass of intended access restrictions
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-23 17:51:44
Moodle does not enforce capability requirements for reading blog comments
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · < 2.2.10

2024-01-23 17:51:13
Moodle does not consider "don't send" attributes during hub registration
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · < 2.2.10

2024-01-23 17:50:53
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class
GitHub

moodle/moodle

>= 2.2.0, < 2.2.10 · >= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · <= 2.1.10 · < 2.2.10

2024-01-23 16:09:04
Moodle is vulnerable to Sensitive Information Disclosure
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · <= 2.2.10 · < 2.3.7

2024-01-23 15:23:21
Authentication library in TYPO3 vulnerable to session fixation
GitHub

typo3/cms

>= 4.2.0, <= 4.2.3 · >= 4.1.0, <= 4.1.7 · >= 4.0.0, <= 4.0.9

2024-01-23 15:13:25
« Previous Next »

Showing 1801 to 1850 of 4252 results

1 2 ... 34 35 36 37 38 39 40 ... 85 86