Security advisories

low2024-11-14

s2n-tls has undefined behavior at process exit

aws/s2n-tls · GHSA-rp9h-rf7g-hwgr

high2024-11-14

CVE-2022-31668-Harbor fails to validate the user permissions when updating p2p preheat policies

goharbor/harbor · GHSA-r864-28pw-8682

medium2024-11-14

CVE-2023-34049-Salt preflight script could be attacker controlled

saltstack/salt · GHSA-4277-m35q-7c9w

high2024-11-13

CVE-2024-52551-Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin

jenkinsci/pipeline-model-definition-plugin · GHSA-p2qq-c693-q53w

high2024-11-13

CVE-2024-52550-Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin

jenkinsci/workflow-cps-plugin · GHSA-mrpr-vr82-x88r

medium2024-11-13

CVE-2024-52549-Missing permission check in Jenkins Script Security Plugin

jenkinsci/script-security-plugin · GHSA-jv82-75fh-23r7

high2024-11-13

CVE-2024-52553-Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin

jenkinsci/oic-auth-plugin · GHSA-h23j-73ww-7594

high2024-11-13

CVE-2024-52552-Stored XSS vulnerability in Jenkins Authorize Project Plugin

jenkinsci/authorize-project-plugin · GHSA-8886-8v27-85j8

high2024-11-13

CVE-2024-52554-Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin

jenkinsci/shared-library-version-override-plugin · GHSA-7845-crfj-phc4

high2024-11-13

CVE-2024-52306-FileManager Deserialization of Untrusted Data vulnerability

laravel-backpack/filemanager · GHSA-8237-957h-h2c2

medium2024-11-13

CVE-2024-52305-UnoPim Stored XSS : Cookie hijacking through Create User function

unopim/unopim · GHSA-cgr4-c233-h733

high2024-11-13

CVE-2024-51996-Symfony has an Authentication Bypass via RememberMe

symfony/symfony · GHSA-cg23-qf8f-62rr

medium2024-11-13

CVE-2024-45594-decidim-meetings Cross-site scripting vulnerability in the online or hybrid meeting embeds

decidim/decidim · GHSA-j4h6-gcj7-7v9v

high2024-11-13

CVE-2024-48510-DotNetZip Directory Traversal vulnerability

haf/dotnetzip.semverd · GHSA-xhg6-9j5j-w4vf

medium2024-11-13

CVE-2024-48900-Moodle IDOR when accessing list of badge recipients

moodle/moodle · GHSA-g8r3-2v89-j6r5

high2024-11-13

CVE-2024-52293-Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI

craftcms/cms · GHSA-f3cw-hg6r-chfv

high2024-11-13

CVE-2024-52292-Craft CMS Arbitrary System File Read

craftcms/cms · GHSA-cw6g-qmjq-6w2w

high2024-11-13

CVE-2024-52291-Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution

craftcms/cms · GHSA-jrh5-vhr9-qh7q

medium2024-11-13

CVE-2024-21541-dom-iterator code execution vulnerability

matthewmueller/dom-iterator · GHSA-jrvm-mcxc-mf6m

critical2024-11-12

CVE-2024-43498-.NET Remote Code Execution Vulnerability

dotnet/runtime · GHSA-v7vf-f5q6-m899