Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

Froxlor contains Static Code Injection
GitHub

froxlor/froxlor

< 2.0.10

2023-02-01 01:38:29
Froxlor contains Business Logic Errors
GitHub

froxlor/froxlor

< 2.0.10

2023-02-01 01:38:25
Dompdf vulnerable to URI validation failure on SVG parsing
GitHub

dompdf/dompdf

< 2.0.2

2023-02-01 01:37:59
Froxlor contains Weak Password Requirements
GitHub

froxlor/froxlor

< 2.0.10

2023-01-31 23:32:10
Command injection in yiisoft/yii2-gii
GitHub

yiisoft/yii2-gii

< 2.2.2

2023-01-31 01:41:32
DataFlow upload remote code execution vulnerability
GitHub

openmage/magento-lts

>= 20.0.0, < 20.0.19 · < 19.4.22

2023-01-27 00:56:59
Fix for authenticated remote code execution through layout update
GitHub

openmage/magento-lts

>= 20.0.0, < 20.0.19 · < 19.4.22

2023-01-27 00:56:40
DoS vulnerability in MaliciousCode filter
GitHub

openmage/magento-lts

>= 20.0.0, < 20.0.19 · < 19.4.22

2023-01-27 00:55:11
Fix for arbitrary file deletion in customer media allows for remote code execution
GitHub

openmage/magento-lts

>= 20.0.0, < 20.0.19 · < 19.4.22

2023-01-27 00:55:00
Fix for arbitrary command execution in custom layout update through blocks
GitHub

openmage/magento-lts

>= 20.0.0, < 20.0.19 · < 19.4.22

2023-01-27 00:54:48
symfont/process typosquatting malware spoofs symfony/process
GitHub

symfont/process

>= 0

2023-01-26 19:53:14
magento-lts Reset Password not protected against well-timed CSRF
GitHub

openmage/magento-lts

>= 20.0.0, < 20.0.19 · < 19.4.22

2023-01-26 19:51:48
Improper Authorization in grumpydictator/firefly-iii
GitHub

grumpydictator/firefly-iii

< 5.8.0

2023-01-25 22:04:27
CakePHP vulnerable to Cross-site Scripting in some development error pages
GitHub

cakephp/cakephp

>= 3.5.0, < 3.5.17 · >= 3.4.0, < 3.4.14 · >= 3.6.0, < 3.6.4

2023-01-20 23:35:20
CakePHP vulnerable to Remote File Inclusion through View template name manipulation
GitHub

cakephp/cakephp

>= 3.0.0, < 3.0.15 · >= 2.6.0, < 2.6.12 · >= 2.5.0, < 2.5.99 · >= 2.4.0, < 2.4.99 · >= 2.3.0, < 2.3.99 · >= 2.2.0, < 2.2.99 · >= 2.1.0, < 2.1.99 · >= 2.0.0, < 2.0.99 · >= 3.1.0, < 3.1.4 · >= 2.7.0, < 2.7.6

2023-01-20 23:35:03
CakePHP allows direct access of prefixed controller actions
GitHub

cakephp/cakephp

>= 2.6.0, < 2.6.11 · >= 2.4.0, < 2.4.99 · >= 2.3.0, < 2.3.99 · >= 2.2.0, < 2.2.99 · >= 2.1.0, < 2.1.99 · >= 2.0.0, < 2.0.99 · >= 2.7.0, < 2.7.2 · >= 2.5.0, < 2.5.9

2023-01-20 23:34:06
CakePHP vulnerable to Denial of Service attack through XML payloads
GitHub

cakephp/cakephp

>= 2.5.0, < 2.5.90 · >= 2.4.0, < 2.4.99 · >= 2.3.0, < 2.3.99 · >= 2.2.0, < 2.2.99 · >= 2.1.0, < 2.1.99 · >= 2.0.0, < 2.0.99 · >= 3.0.0, < 3.0.6 · >= 2.6.0, < 2.6.6

2023-01-20 23:23:29
CakePHP SecurityComponent cross form submission issue
GitHub

cakephp/cakephp

>= 1.3.0, < 1.3.18 · >= 2.0.0, < 2.4.8

2023-01-20 23:22:11
Shopware has Improper Input Validation issue in newsletter subscription
GitHub

shopware/platform

<= 6.4.18.0

2023-01-20 23:19:38
Shopware has Insufficient Session Expiration in Administration
GitHub

shopware/platform

<= 6.4.18.0

2023-01-20 23:19:38
phpMyFAQ Stored Cross-site Scripting vulnerability
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-20 23:10:18
CakePHP has incorrect Cross-Site Request Forgery validation
GitHub

cakephp/cakephp

>= 3.0.0, < 3.0.4

2023-01-20 23:02:03
phpMyFAQ has Weak Password Requirements
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-20 22:46:38
phpMyFAQ Stored Cross-site Scripting vulnerability
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-20 22:02:29
phpMyFAQ Stored Cross-site Scripting vulnerability
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-20 22:02:16
phpMyFAQ Stored Cross-site Scripting vulnerability
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-20 22:02:03
phpMyFAQ Improper Authentication vulnerability
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-20 22:01:50
phpMyFAQ Stored Cross-site Scripting vulnerability
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-20 22:01:40
phpMyFAQ Reflected Cross-site Scripting vulnerability
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-20 22:01:28
Shopware's log module vulnerable to Improper Output Neutralization
GitHub

shopware/platform

<= 6.4.18.0

2023-01-20 17:33:55
CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
GitHub

cakephp/cakephp

>= 4.4.0, < 4.4.10 · >= 4.3.0, < 4.3.11 · >= 4.2.0, < 4.2.12

2023-01-20 17:30:28
pimcore is vulnerable to cross-site scripting via "title field " in data objects
GitHub

pimcore/pimcore

< 10.5.14

2023-01-20 16:55:25
Froxlor is vulnerable to path traversal
GitHub

froxlor/froxlor

< 2.0.0

2023-01-19 18:24:43
thorsten/phpmyfaq is vulnerable to cross-site scripting (XSS)
GitHub

thorsten/phpmyfaq

< 3.1.10

2023-01-19 11:47:52
Froxlor vulnerable to Command Injection
GitHub

froxlor/froxlor

< 2.0.8

2023-01-18 18:25:00
Backdrop CMS Unrestricted File Upload vulnerability
GitHub

backdrop/backdrop

<= 1.22.0

2023-01-18 06:13:30
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
GitHub

shopware/platform

<= 6.4.18.0

2023-01-17 23:58:07
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
GitHub

shopware/platform

<= 6.4.18.0

2023-01-17 23:57:24
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
GitHub

cakephp/cakephp

>= 1.0.1.2708, < 1.1.8.3544

2023-01-14 05:31:09
CakePHP allows remote attackers to spoof their IP
GitHub

cakephp/cakephp

>= 3.1.0-beta1, < 3.1.12 · >= 3.0.0-rc1, < 3.0.17 · >= 2.7.0-rc1, < 2.7.11 · >= 3.2.0-rc1, < 3.2.5 · >= 2.8.0-rc1, < 2.8.2 · >= 1.2.0, < 2.6.13

2023-01-14 05:30:43
CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter
GitHub

cakephp/cakephp

>= 2.0.0-alpha, < 3.1.5

2023-01-14 05:30:24
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
GitHub

cakephp/cakephp

= 1.3.7

2023-01-14 05:29:44
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
GitHub

cakephp/cakephp

>= 1.2.8, < 1.3.6

2023-01-14 05:29:33
CakePHP allows method override parameters to bypass CSRF checks
GitHub

cakephp/cakephp

>= 4.0.0, < 4.0.10 · >= 4.1.0, < 4.1.4

2023-01-14 05:29:18
himiklab yii2-jqgrid-widget vulnerable to SQL Injection
GitHub

himiklab/yii2-jqgrid-widget

< 1.0.8

2023-01-12 20:58:36
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
GitHub

phpxmlrpc/phpxmlrpc

< 4.9.0

2023-01-11 23:54:47
XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
GitHub

phpxmlrpc/phpxmlrpc

< 4.9.0

2023-01-11 23:53:34
XML-RPC for PHP's debugger vulnerable to possible XSS attack
GitHub

phpxmlrpc/phpxmlrpc

< 4.9.2

2023-01-11 23:51:01
Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
GitHub

flarum/core

>= 1.3.0, < 1.6.3

2023-01-10 22:28:20
Flarum notifications can leak restricted content
GitHub

flarum/core

< 1.6.3

2023-01-10 22:27:13
« Previous Next »

Showing 3501 to 3550 of 4580 results

1 2 ... 68 69 70 71 72 73 74 ... 91 92