Security advisories

medium2024-11-18

CVE-2024-48896-Moodle leaks user names

moodle/moodle · GHSA-cq5f-wv7p-5gfc

medium2024-11-18

CVE-2024-11023-Firebase JavaScript SDK allows attackers to manipulate the "_authTokenSyncURL" to point to their own server

firebase/firebase-js-sdk · GHSA-3wf4-68gx-mph8

medium2024-11-18

CVE-2024-38828-Spring MVC controller vulnerable to a DoS attack

spring-projects/spring-framework · GHSA-w3c8-7r8f-9jp8

medium2024-11-17

CVE-2023-1419-Debezium database connector has a script injection vulnerability

debezium/debezium · GHSA-hvw5-3mgw-7rcf

high2024-11-17

CVE-2024-0793-Kubernetes Nil pointer dereference in KCM after v1 HPA patch request

kubernetes/kubernetes · GHSA-h7wq-jj8r-qm7p

high2024-11-17

CVE-2023-4639-Undertow incorrectly parses cookies

undertow-io/undertow · GHSA-3jrv-jgp8-45v3

medium2024-11-17

CVE-2023-6110- OpenStack improperly deletes access rules

openstack/python-openstackclient · GHSA-2ppf-2m6f-6v6f

high2024-11-15

CVE-2024-52526-LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php

librenms/librenms · GHSA-8fh4-942r-jf2g

low2024-11-15

CVE-2024-21539-Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

eslint/rewrite · GHSA-7q7g-4xm8-89cq

high2024-11-15

CVE-2024-44625-Remote Code Execution in Gogs

gogs/gogs · GHSA-phm4-wf3h-pc3r

critical2024-11-15

CVE-2024-51092-LibreNMS has an Authenticated OS Command Injection

librenms/librenms · GHSA-x645-6pf9-xwxw

high2024-11-15

CVE-2024-51497-LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php

librenms/librenms · GHSA-gv4m-f6fx-859x

high2024-11-15

CVE-2024-51496-LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php

librenms/librenms · GHSA-28p7-f6h6-3jh3

high2024-11-15

CVE-2024-51495-LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php

librenms/librenms · GHSA-p66q-ppwr-q5j8

high2024-11-15

CVE-2024-51494-LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php

librenms/librenms · GHSA-7663-37rg-c377

high2024-11-15

CVE-2024-50355-LibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints

librenms/librenms · GHSA-4m5r-w2rq-q54q

high2024-11-15

CVE-2024-50352-LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php

librenms/librenms · GHSA-qr8f-5qqg-j3wg

high2024-11-15

CVE-2024-50351-LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php

librenms/librenms · GHSA-v7w9-63xh-6r3w

high2024-11-15

CVE-2024-50350-LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php

librenms/librenms · GHSA-xh4g-c9p6-5jxg

high2024-11-15

CVE-2024-49764-LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php

librenms/librenms · GHSA-rmr4-x6c9-jc68