Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:20:14
Moodle allows attackers to modify the visibility of a badge
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5

2024-01-24 16:19:46
Moodle's time-validation implementation allows bypassing intended restrictions
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:18:21
Moodle cross-site request forgery (CSRF) vulnerability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:18:06
Moodle places a session key in a URL
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:17:51
Moodle allows attackers to obtain sensitive information
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:17:31
Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial
GitHub

composer/composer

>= 2.0.0-alpha1, < 2.0.13 · >= 2.0, < 2.0.13 · < 1.10.22

2024-01-24 10:46:03
Missing input validation can lead to command execution in composer
GitHub

composer/composer

>= 2.3.0, < 2.3.5 · >= 2.0, < 2.2.12 · >= 2.3, < 2.3.5 · < 1.10.26

2024-01-24 10:22:26
No permission checks for editing/deleting records with CSV import form
GitHub

silverstripe/admin

>= 1.0.0, < 1.13.19 · >= 2.0.0, < 2.1.8

2024-01-23 20:09:52
Typo3 Backend XSS Vulnerability
GitHub

typo3/cms

>= 4.1.0, < 4.1.10 · >= 4.2.0, < 4.2.6 · >= 3.3.0, < 3.9.0 · >= 4.0, < 4.0.12 · = 4.3alpha1

2024-01-23 18:24:10
phpMyAdmin HTTP Response Splitting Vulnerability
GitHub

phpmyadmin/phpmyadmin

< 3.1.3.1

2024-01-23 18:12:58
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
GitHub

typo3/cms

>= 4.2.0, <= 4.2.3 · >= 4.1.0, <= 4.1.7 · >= 4.0.0, <= 4.0.9

2024-01-23 18:11:53
Moodle does not properly restrict access
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-23 17:51:56
Moodle allows bypass of intended access restrictions
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-23 17:51:44
Moodle does not enforce capability requirements for reading blog comments
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · < 2.2.10

2024-01-23 17:51:13
Moodle does not consider "don't send" attributes during hub registration
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · < 2.2.10

2024-01-23 17:50:53
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class
GitHub

moodle/moodle

>= 2.2.0, < 2.2.10 · >= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · <= 2.1.10 · < 2.2.10

2024-01-23 16:09:04
Moodle is vulnerable to Sensitive Information Disclosure
GitHub

moodle/moodle

>= 2.4.0, < 2.4.4 · >= 2.3.0, < 2.3.7 · <= 2.2.10 · < 2.3.7

2024-01-23 15:23:21
Authentication library in TYPO3 vulnerable to session fixation
GitHub

typo3/cms

>= 4.2.0, <= 4.2.3 · >= 4.1.0, <= 4.1.7 · >= 4.0.0, <= 4.0.9

2024-01-23 15:13:25
Cross-site Scripting in Bagisto
GitHub

bagisto/bagisto

< 1.3.2

2024-01-23 14:38:32
Moodle's login_as feature leaks information from external repositories
GitHub

moodle/moodle

>= 2.4.0, < 2.4.2 · >= 2.3.0, < 2.3.5 · >= 2.0.0, < 2.2.8

2024-01-23 14:37:25
Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
GitHub

silverstripe/framework

>= 5.0.0, < 5.1.11 · < 4.13.39

2024-01-23 12:49:29
View permissions are bypassed for paginated lists of ORM data
GitHub

silverstripe/graphql

>= 5.0.0, < 5.1.3 · >= 4.0.0, < 4.3.7

2024-01-23 12:49:11
Moodle does not properly manage privileges for WebDAV repositories
GitHub

moodle/moodle

>= 2.4.0, < 2.4.2 · >= 2.3.0, < 2.3.5 · >= 2.0.0, < 2.2.8

2024-01-22 21:22:24
Moodle allows remote authenticated users to reassign notes
GitHub

moodle/moodle

>= 2.4.0, < 2.4.2 · >= 2.3.0, < 2.3.5 · >= 1.9.0, < 2.2.8

2024-01-22 17:08:54
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module
GitHub

moodle/moodle

>= 2.0.0, <= 2.1.10 · >= 2.0.0, < 2.1.10 · >= 2.4.0, < 2.4.2 · >= 2.3.0, < 2.3.5 · >= 2.2.0, < 2.2.8

2024-01-22 16:53:26
Moodle includes the WebDAV password in the configuration form
GitHub

moodle/moodle

>= 2.0.0, <= 2.1.10 · >= 2.4.0, < 2.4.2 · >= 2.3.0, < 2.3.5 · >= 2.2.0, < 2.2.8

2024-01-22 16:49:24
Moodle reveals absolute path in exception message
GitHub

moodle/moodle

>= 2.4.0, < 2.4.2 · >= 2.3.0, < 2.3.5 · >= 2.2.0, < 2.2.8 · <= 2.1.10

2024-01-22 15:58:13
Magento Reflected Cross-site Scripting vulnerability via 'file' parameter
GitHub

magento/community-edition

>= 2.4.0, < 2.4.2 · < 2.3.6-p1

2024-01-20 05:06:48
Drupal Denial of Service vulnerability
GitHub

drupal/core

= 9.3.6

2024-01-19 22:11:17
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API
GitHub

typo3/cms-core

>= 4.4, < 4.4.1 · >= 4.3, < 4.3.4 · < 4.2.13

2024-01-19 21:36:54
Silverstripe CMS Arbitrary Code Execution
GitHub

silverstripe/cms

>= 2.4.0, < 2.4.6

2024-01-19 17:34:36
Drupal Access Control Bypass
GitHub

drupal/core

>= 7.0, < 7.3

2024-01-19 17:29:45
Moodle allows remote attackers to read arbitrary files
GitHub

moodle/moodle

>= 2.4.0, < 2.4.11 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · <= 2.3.11 · = 2.7.0

2024-01-19 16:05:47
Moodle does not enforce the forceloginforprofiles setting
GitHub

moodle/moodle

>= 2.4.0, < 2.4.2 · >= 2.3.0, < 2.3.5 · >= 2.2.0, < 2.2.8 · <= 2.1.10

2024-01-19 16:05:12
Woocommerce Cross-site Scripting via Additional tax classes field when taxes are enabled
GitHub

woocommerce/woocommerce

< 5.2.0

2024-01-19 05:05:59
Stored cross site scripting via container name
GitHub

concrete5/concrete5

< 9.2.0

2024-01-18 05:06:52
Broken Access Control order API in Shopware
GitHub

shopware/core

<= 6.5.7.3

2024-01-17 20:29:35
Blind SQL injection in shopware
GitHub

shopware/core

<= 6.5.7.3

2024-01-17 20:28:51
Moodle CRLF Injection Vulnerability in Calendar Component
GitHub

moodle/moodle

>= 2.1, < 2.1.3 · >= 2.0, < 2.0.6 · < 1.9.15

2024-01-17 18:51:02
Moodle Incorrect Default Settings
GitHub

moodle/moodle

>= 2.0, < 2.0.2

2024-01-17 18:38:46
Moodle vulnerable to XSS via bundled spikephpcoverage library
GitHub

moodle/moodle

>= 2.0, < 2.0.2

2024-01-17 18:37:05
Moodle Open Redirect in Calendar Set Page
GitHub

moodle/moodle

>= 2.1, < 2.1.3

2024-01-17 18:26:37
Moodle does not properly restrict access to category and course data
GitHub

moodle/moodle

>= 2.0.0, < 2.0.5 · >= 2.1, < 2.1.2

2024-01-17 15:51:24
Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory
GitHub

moodle/moodle

>= 2.1, < 2.1.1 · >= 2.0, < 2.0.4

2024-01-17 15:47:33
Moodle XSS Vulnerability
GitHub

moodle/moodle

< 1.9.14

2024-01-17 15:44:26
Moodle Allows Modification of Constants
GitHub

moodle/moodle

>= 2.1, < 2.1.2 · >= 2.0, < 2.0.5 · < 1.9.14

2024-01-17 15:43:31
Moodle XSS In Tag Autocomplete functionality
GitHub

moodle/moodle

>= 2.0, < 2.0.2 · < 1.9.11

2024-01-17 15:38:28
Moodle Open Redirect Via Error Messages
GitHub

moodle/moodle

>= 2.1, < 2.1.1 · >= 2.0, < 2.0.4 · < 1.9.13

2024-01-17 15:37:52
Neos CMS Cross Site Scripting vulnerability
GitHub

neos/media-browser

>= 8.2.0, < 8.2.11 · >= 8.1.0, < 8.1.11 · >= 8.0.0, < 8.0.16 · >= 8.3.0, < 8.3.9 · <= 8.3.3 · < 7.3.19

2024-01-16 17:08:24
« Previous Next »

Showing 2201 to 2250 of 4580 results

1 2 ... 42 43 44 45 46 47 48 ... 91 92