Security advisories

medium2025-01-23

CVE-2024-53299-Apache Wicket: An attacker can intentionally trigger a memory leak

apache/wicket · GHSA-9cxr-76pm-j3wf

medium2025-01-23

CVE-2025-24530-phpMyAdmin XSS when checking tables

phpmyadmin/phpmyadmin · GHSA-222v-cx2c-q2f5

medium2025-01-22

CVE-2024-56923-Cross site scripting in Silverpeas Core

silverpeas/silverpeas-core · GHSA-788m-27g4-cf86

medium2025-01-22

CVE-2025-24402-CSRF vulnerability in Jenkins Azure Service Fabric Plugin

jenkinsci/service-fabric-plugin · GHSA-wh3h-j8wp-6p42

medium2025-01-22

CVE-2025-24403-Missing permission checks in Jenkins Azure Service Fabric Plugin

jenkinsci/service-fabric-plugin · GHSA-gp8p-49gr-jv8j

medium2025-01-22

CVE-2025-24401-Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin

jenkinsci/folder-auth-plugin · GHSA-969g-rq57-c79h

medium2025-01-22

CVE-2025-24397-Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs

jenkinsci/gitlab-plugin · GHSA-xhgq-h98j-859v

high2025-01-22

CVE-2025-24398-Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL

jenkinsci/atlassian-bitbucket-server-integration-plugin · GHSA-qjw6-xvrm-5f2h

high2025-01-22

CVE-2025-24399-Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin

jenkinsci/oic-auth-plugin · GHSA-q9cm-88jx-3vfw

medium2025-01-22

CVE-2025-24400-Cache confusion in Jenkins Eiffel Broadcaster Plugin

jenkinsci/eiffel-broadcaster-plugin · GHSA-fpw7-8gjc-jwqj

medium2025-01-22

CVE-2025-24027-ps_contactinfo has a potential XSS due to usage of the nofilter tag in template

prestashop/ps_contactinfo · GHSA-35pq-7pv2-2rfw

medium2025-01-22

CVE-2025-23047-Cilium has an information leakage via insecure default Hubble UI CORS header

cilium/cilium · GHSA-h78m-j95m-5356

medium2025-01-22

CVE-2025-23028-DoS in Cilium agent DNS proxy from crafted DNS responses

cilium/cilium · GHSA-9m5p-c77c-f9j7

critical2025-01-22

CVE-2024-45479-Apache Ranger UI vulnerable to Server Side Request Forgery

apache/ranger · GHSA-g9gf-g5jq-9h3v

medium2025-01-22

CVE-2024-45478-Apache Ranger has Stored Cross-site Scripting vulnerability in Edit Service Page

apache/ranger · GHSA-vrx2-mgr9-v67h

high2025-01-21

CVE-2024-51417-Property reflection in System.Linq.Dynamic.Core

zzzprojects/system.linq.dynamic.core · GHSA-4cv2-4hjh-77rx

medium2025-01-21

CVE-2024-10761-XSS/HTML Injection Vulnerability in Umbraco Preview Badge

umbraco/umbraco-cms · GHSA-69cg-w8vm-h229

high2025-01-21

CVE-2024-11218-Buildah allows build breakout using malicious Containerfiles and concurrent builds

containers/buildah · GHSA-5vpc-35f4-r8w6

medium2025-01-21

CVE-2025-24011-Umbraco Allows User Enumeration Feasible Based On Management API Timing and Response Codes

umbraco/umbraco-cms · GHSA-hmg4-wwm5-p999

medium2025-01-21

CVE-2025-29049-MathLive's Lack of Escaping of HTML allows for XSS

arnog/mathlive · GHSA-qwj6-q94f-8425