Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:47:30
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:47:15
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:46:55
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:46:35
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-25 21:46:05
Remote code execution in php-heic-to-jpg
GitHub

maestroerror/php-heic-to-jpg

< 1.0.5

2024-10-24 21:45:56
Pterodactyl Panel has plain-text logging of user passwords when two-factor authentication is disabled
GitHub

pterodactyl/panel

< 1.11.8

2024-10-24 19:07:03
ai-admin-graphql has a Denial of service vulnerability in SaaS and marketplace setups
GitHub

aimeos/ai-admin-graphql

>= 2024.04.1, < 2024.07.2

2024-10-24 17:48:41
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
GitHub

baserproject/basercms

<= 5.1.1

2024-10-24 17:45:59
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature
GitHub

baserproject/basercms

<= 5.1.1

2024-10-24 17:45:11
baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request
GitHub

baserproject/basercms

<= 5.1.1

2024-10-24 17:44:22
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature
GitHub

baserproject/basercms

<= 5.1.1

2024-10-24 17:43:43
SQL injection in funadmin
GitHub

funadmin/funadmin

<= 5.0.2

2024-10-21 19:43:42
Cross-site Scripting via uploaded SVG
GitHub

sulu/sulu

>= 2.0.0-RC1, < 2.5.21 · >= 2.6.0-RC1, < 2.6.5 · >= 2.0.0-RC1, < 2.6.5

2024-10-18 14:42:41
Path traversal in redaxo
GitHub

redaxo/source

<= 5.17.1

2024-10-17 22:07:59
Injection of arbitrary HTML/JavaScript code through the media download URL
GitHub

sulu/sulu

>= 2.0.0, <= 2.5.20 · >= 2.6.0, <= 2.6.4 · = 2.5.20 · = 2.6.4

2024-10-17 16:27:23
Admidio Vulnerable to HTML Injection In The Messages Section
GitHub

admidio/admidio

< 4.3.12

2024-10-16 19:50:42
Magento Open Source Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:12:09
Magento Open Source Improper Input Validation vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:11:50
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:11:15
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:10:40
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:10:14
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 19:09:54
Magento Open Source stored Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:27:40
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:27:18
Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:26:48
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:25:23
Magento Open Source Incorrect Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:24:31
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:23:57
Magento Open Source Information Exposure vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:23:33
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:22:45
Magento Open Source Information Exposure vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:18:20
Magento Open Source Improper Authorization vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:17:16
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:16:57
Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:16:29
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 18:15:49
Snipe-IT remote code execution
GitHub

snipe/snipe-it

< 7.0.10

2024-10-11 17:47:52
Magento Open Source Improper Access Control vulnerability
GitHub

magento/community-edition

>= 2.4.7-beta1, < 2.4.7-p3 · >= 2.4.5-p1, < 2.4.5-p10 · >= 2.4.6-p1, < 2.4.6-p8 · < 2.4.4-p11 · = 2.4.7 · = 2.4.6 · = 2.4.5 · = 2.4.4

2024-10-11 17:09:27
Livewire Remote Code Execution on File Uploads
GitHub

livewire/livewire

>= 3.0.0-beta.1, < 3.5.2 · < 2.12.7 · < 3.5.2

2024-10-09 23:52:22
Information Disclosure in TYPO3 Page Tree
GitHub

typo3/cms-backend

>= 12.0.0, < 12.4.21 · >= 11.0.0, < 11.5.40 · >= 10.0.0, < 10.4.46 · >= 13.0.0, < 13.3.1 · < 11.5.40

2024-10-09 16:19:54
Denial of Service in TYPO3 Bookmark Toolbar
GitHub

typo3/cms-backend

>= 11.0.0, <= 11.5.39 · >= 10.0.0, <= 10.4.45 · >= 12.0.0, < 12.4.20 · = 13.0.0

2024-10-08 22:18:30
Drupal Full Path Disclosure
GitHub

drupal/drupal

>= 8.0.0, <= 11.0.4 · >= 11.0.0, < 11.0.5 · >= 10.3.0, < 10.3.6 · >= 8.0.0, < 10.3.6 · >= 8.0.0, < 10.2.9 · = 11.x-dev

2024-10-08 14:54:52
Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name
GitHub

krayin/laravel-crm

<= 1.3.0

2024-10-07 19:27:15
LimeSurvey Cross Site Scripting vulnerability
GitHub

limesurvey/limesurvey

< 6.5.12

2024-10-07 19:26:38
LimeSurvey Cross Site Scripting vulnerability
GitHub

limesurvey/limesurvey

< 6.5.0

2024-10-07 19:02:00
XXE in PHPSpreadsheet's XLSX reader
GitHub

phpoffice/phpspreadsheet

>= 2.2.0, < 2.3.0 · >= 2.0.0, < 2.1.1 · < 1.29.1

2024-10-07 15:58:53
PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks
GitHub

phpoffice/phpspreadsheet

>= 2.2.0, < 2.3.0 · >= 2.0.0, < 2.1.1 · < 1.29.2

2024-10-07 15:58:27
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled
GitHub

phpoffice/phpspreadsheet

>= 2.2.0, < 2.3.0 · >= 2.0.0, < 2.1.1 · < 1.29.2

2024-10-07 15:58:07
PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file
GitHub

phpoffice/phpspreadsheet

>= 2.2.0, < 2.3.0 · >= 2.0.0, < 2.1.1 · < 1.29.2

2024-10-07 15:57:40
Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS
GitHub

lara-zeus/dynamic-dashboard

>= 3.0.0, <= 3.0.1 · >= 1.0.0, <= 1.0.6

2024-10-07 14:55:31
« Previous Next »

Showing 151 to 200 of 4252 results

1 2 3 4 5 6 7 8 9 10 ... 85 86