Advisories via GitHub

Listing reported advisories via GitHub sorted by their report date.

Command injection in mail agent settings
GitHub

shopware/platform

<= 6.4.3.0

2021-08-26 19:40:02
Insecure direct object reference of log files of the Import/Export feature
GitHub

shopware/platform

<= 6.4.3.0

2021-08-26 19:36:37
Cross-site scripting in imgURL
GitHub

helloxz/imgurl

<= 2.31

2021-08-26 16:24:17
Dolibarr vulnerable to Improper Authentication and Improper Access Control
GitHub

dolibarr/dolibarr

>= 3.3.beta1, < 13.0.2

2021-08-26 15:30:25
OS Command Injection in Centreon
GitHub

centreon/centreon

<= 19.10.8

2021-08-26 14:59:25
Command Injection in RaspAP 2.6.6
GitHub

billz/raspap-webgui

<= 2.6.6

2021-08-25 19:47:53
raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.
GitHub

billz/raspap-webgui

<= 2.6.6

2021-08-25 19:43:55
SafeCurl before 0.9.2 has a DNS rebinding vulnerability.
GitHub

vanilla/safecurl

< 0.9.2

2021-08-24 20:08:48
Cross-Site Scripting via SVG media files
GitHub

shopware/core

<= 6.4.3.0

2021-08-23 17:25:38
Authenticated server-side request forgery in file upload via URL.
GitHub

shopware/platform

<= 6.4.3.0

2021-08-23 17:22:59
CKEditor 4 vulnerabilities in versions <4.16.1
GitHub

pimcore/pimcore

< 10.1.1

2021-08-23 17:15:06
Weak Password Recovery Mechanism for Forgotten Password
GitHub

dolibarr/dolibarr

< 14.0.0

2021-08-19 20:13:51
Cross-site Scripting in Grav
GitHub

getgrav/grav

<= 1.7.0-beta.7

2021-08-17 22:39:50
Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc
GitHub

showdoc/showdoc

< 2.9.8

2021-08-16 23:13:13
No Restriction of Excessive Authentication Attempts in Firefly III
GitHub

grumpydictator/firefly-iii

< 5.5.13

2021-08-02 22:14:41
Cross Site Scripting in LavaLite CMS
GitHub

lavalite/cms

<= 5.8.0

2021-08-02 21:50:56
Code injection in topthink/think
GitHub

topthink/think

<= 6.0.9

2021-08-02 21:43:13
Directory Traversal in Archive_Tar
GitHub

pear/archive_tar

< 1.4.14

2021-08-02 18:04:47
Improper Input Validation in Centreon Web
GitHub

centreon/centreon

>= 19.0.0, < 19.04.5 · < 18.10.8

2021-07-28 17:52:24
Incorrect Authorization in TYPO3 extension
GitHub

localizationteam/l10nmgr

>= 9.0.0, < 9.2.0 · >= 8.0.0, < 8.7.0 · < 7.4.0

2021-07-26 21:38:09
Missing Authorization in TYPO3 extension
GitHub

directmailteam/direct-mail

< 5.2.4

2021-07-26 21:34:43
Missing Authorization in TYPO3 extension
GitHub

directmailteam/direct-mail

< 5.2.4

2021-07-26 21:33:33
Incorrect Authorization in TeamPass
GitHub

nilsteampassnet/teampass

<= 2.1.27.36

2021-07-26 21:12:20
Missing Authorization in TeamPass
GitHub

nilsteampassnet/teampass

<= 2.1.27.36

2021-07-26 21:11:20
Exposure of Resource to Wrong Sphere in LibreNMS
GitHub

librenms/librenms

< 1.65.1

2021-07-26 19:20:01
Improper Input Validation in Firefly III
GitHub

grumpydictator/firefly-iii

<= 4.7.17.3

2021-07-22 21:50:39
Information Disclosure in User Authentication
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.18 · >= 11.0.0, < 11.3.1 · >= 9.0.0, < 9.5.28 · >= 8.0.0, < 8.7.41 · >= 7.0.0, < 7.6.52

2021-07-22 20:24:01
Cross-Site Scripting in Backend Grid View
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.18 · >= 11.0.0, < 11.3.1 · >= 9.0.0, < 9.5.28 · >= 8.0.0, < 8.7.41

2021-07-20 17:43:43
Cross-Site Scripting in Page Preview
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.18 · >= 11.0.0, < 11.3.1 · >= 9.0.0, < 9.5.28

2021-07-20 17:02:53
SQL injection in pimcore/pimcore
GitHub

pimcore/pimcore

< 10.0.7

2021-07-13 16:18:51
Files or Directories Accessible to External Parties in ether/logs
GitHub

ether/logs

< 3.0.4

2021-07-09 14:04:21
Arbitrary file upload in Fork CMS
GitHub

forkcms/forkcms

<= 5.9.2

2021-07-08 13:59:31
Cross-site scripting in LavaLite-CMS
GitHub

lavalite/cms

<= 5.8.0

2021-07-08 13:53:20
XSS Injection in Media Collection Title was possible
GitHub

sulu/sulu

< 1.6.41

2021-07-02 18:03:49
Cross-site scripting (XSS) from field and configuration text displayed in the Panel
GitHub

getkirby/cms

<= 3.5.6

2021-07-02 16:38:11
List of order ids, number, items total and token value exposed for unauthorized uses via new API
GitHub

sylius/sylius

>= 1.9.0, < 1.9.5

2021-06-28 18:23:22
Missing Authentication for Critical Function
GitHub

shopware/platform

<= 6.4.1.0

2021-06-25 15:36:06
Session Fixation
GitHub

shopware/platform

<= 6.3.5.1

2021-06-25 15:35:08
Cross-site scripting
GitHub

shopware/shopware

< 5.6.10

2021-06-25 15:33:56
Exposure of Sensitive Information to an Unauthorized Actor
GitHub

shopware/shopware

< 5.6.10

2021-06-25 15:32:29
Exposure of Sensitive Information to an Unauthorized Actor
GitHub

shopware/platform

<= 6.4.1.0

2021-06-25 15:30:09
Exposure of Sensitive Information to an Unauthorized Actor
GitHub

shopware/platform

<= 6.3.5.0

2021-06-25 15:29:11
Exposure of Sensitive Information to an Unauthorized Actor
GitHub

shopware/platform

<= 6.4.1.0

2021-06-25 15:26:55
non-admin users can create integration role with administrator role
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 19:31:04
Internal hidden fields are visible on to many associations in admin api
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 19:20:57
Private files publicly accessible with Cloud Storage providers
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 19:20:28
Creation of order credits was not validated by acl in admin orders
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 19:19:59
Canceling of orders not related to the logged-in user
GitHub

shopware/platform

<= 6.4.1.0

2021-06-24 18:04:48
Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
GitHub

league/flysystem

>= 2.0.0, < 2.1.1 · < 1.1.4

2021-06-24 18:03:17
Cross-site scripting in PageKit
GitHub

pagekit/pagekit

<= 1.0.18

2021-06-17 17:32:03
« Previous Next »

Showing 4001 to 4050 of 4252 results

1 2 ... 77 78 79 80 81 82 83 84 85 86