Security Advisories | GitStock

critical2022-05-24

CVE-2021-21014-Magento vulnerable to a file upload restriction bypass

magento/magento2 · GHSA-269w-pqc7-68q9

high2022-05-24

CVE-2021-21015-Magento OS command injection via the customer attribute save controller

magento/magento2 · GHSA-w2p4-2c8c-2g7h

critical2022-05-24

CVE-2021-21016-Magento OS command injection via the WebAPI

magento/magento2 · GHSA-792f-c8mp-2cr5

medium2022-05-24

CVE-2021-26954-insert_slice_clone can double drop if Clone panics.

qwertz19281/rust_utils · GHSA-68p4-pjpf-xwcq

high2022-05-24

CVE-2021-0341-Square OkHttp can accept the wrong certificate

square/okhttp · GHSA-3cqm-mf7h-prrj

medium2022-05-24

CVE-2020-7021-Insertion of Sensitive Information into Log File in Elasticsearch

elastic/elasticsearch · GHSA-cqgv-256r-m9r8

medium2022-05-24

CVE-2020-29603-MantisBT Insecure Storage in manage_proj_edit_page.php

mantisbt/mantisbt · GHSA-qpj5-f88q-x7px

medium2022-05-24

CVE-2020-29605-MantisBT Incorrect Authorization in bug_actiongroup_page.php

mantisbt/mantisbt · GHSA-pgg9-mmcg-8mxp

medium2022-05-24

CVE-2020-29604-MantisBT Missing Authorization access check in bug_actiongroup.php

mantisbt/mantisbt · GHSA-f38c-wxp6-8xjv

medium2022-05-24

CVE-2021-20184-Moodle Grade information disclosure in grade's external fetch functions

moodle/moodle · GHSA-mm73-86f9-5x5c

medium2022-05-24

CVE-2021-20186-Moodle Cross-site Scripting

moodle/moodle · GHSA-h8m4-h385-qhqv

medium2022-05-24

CVE-2021-20185-Moodle Client side denial of service via personal message

moodle/moodle · GHSA-c3j6-33r4-89q3

high2022-05-24

CVE-2021-20187-Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration

moodle/moodle · GHSA-2jrm-gww7-wch2

high2022-05-24

CVE-2020-23355-Codiad Vulnerable to PHP Magic Hash Vulnerability

codiad/codiad · GHSA-8fhh-hf9w-55p7

high2022-05-24

CVE-2021-3291-Zen Cart vulnerable to authenticated remote code execution

zencart/zencart · GHSA-38f9-4vhq-9cr8

medium2022-05-24

CVE-2021-26271-CKEditor 4 ReDoS Vulnerability

ckeditor/ckeditor4 · GHSA-jv4c-7jqq-m34x

critical2022-05-24

CVE-2021-25900-Buffer overflow in SmallVec::insert_many

servo/rust-smallvec · GHSA-43w2-9j62-hq99

medium2022-05-24

CVE-2020-36202-Async-h1 request smuggling possible with long unread bodies

http-rs/async-h1 · GHSA-c8rq-crxj-mj9m

high2022-05-24

CVE-2020-35239-CakePHP allows method override parameters to bypass CSRF checks

cakephp/cakephp · GHSA-9pgx-pf36-w46r

medium2022-05-24

CVE-2020-21146-Feehi CMS vulnerable to Cross-site Scripting in Username Field

liufee/cms · GHSA-v762-47vh-j7q3