Security advisories

low2024-11-07

CVE-2024-51758-Filament has exported files stored in default (`public`) filesystem if not reconfigured

filamentphp/filament · GHSA-4hxw-gc2q-f6f3

high2024-11-07

CVE-2024-43434-Moodle has CSRF risk in Feedback non-respondents report

moodle/moodle · GHSA-x87r-37q5-mmr8

medium2024-11-07

CVE-2024-43431-Moodle's IDOR in badges allows deletion of arbitrary badges

moodle/moodle · GHSA-wwjf-gwrv-wh45

medium2024-11-07

CVE-2024-43426-Moodle has arbitrary file read risk through pdfTeX

moodle/moodle · GHSA-vjmm-r9gg-425m

high2024-11-07

CVE-2024-43425-Moodle Remote Code Execution vulnerability

moodle/moodle · GHSA-v6f4-v8h8-3c87

medium2024-11-07

CVE-2024-43440-Moodle LFI vulnerability when restoring malformed block backups

moodle/moodle · GHSA-qrqv-26gf-xgwh

medium2024-11-07

CVE-2024-43438-Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users

moodle/moodle · GHSA-p9cx-f595-h79h

medium2024-11-07

CVE-2024-43436-Moodle vulnerable to site administration SQL injection via XMLDB editor

moodle/moodle · GHSA-mx26-62xm-2p83

medium2024-11-07

CVE-2024-43428-Moodle vulnerable to cache poisoning via injection into storage

moodle/moodle · GHSA-2r9m-wg35-rfvc

high2024-11-07

CVE-2024-51504-Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server

apache/zookeeper · GHSA-g93m-8x6h-g5gv

medium2024-11-07

CVE-2023-1932-hibernate-validator Cross-site Scripting vulnerability

hibernate/hibernate-validator · GHSA-x83m-pf6f-pf9g

medium2024-11-07

CVE-2023-1973-Undertow Denial of Service vulnerability

undertow-io/undertow · GHSA-97cq-f4jm-mv8h

high2024-11-07

CVE-2024-38286-Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability

apache/tomcat · GHSA-7jqf-v358-p8g7

high2024-11-06

CVE-2024-51988-RabbitMQ HTTP API's queue deletion endpoint does not verify that the user has a required permission

rabbitmq/rabbitmq-server · GHSA-pj33-75x5-32j4

low2024-11-06

CVE-2024-51755-Twig has unguarded calls to `__isset()` and to array-accesses when the sandbox is enabled

twigphp/twig · GHSA-jjxq-ff2g-95vh

low2024-11-06

CVE-2024-51754-Twig has unguarded calls to `__toString()` when nesting an object into an array

twigphp/twig · GHSA-6377-hfv9-hqf6

medium2024-11-06

CVE-2024-50637-UnoPim Cross-site Scripting vulnerability

unopim/unopim · GHSA-hv6m-qj65-26q3

medium2024-11-06

CVE-2024-51751-Gradio vulnerable to arbitrary file read with File and UploadButton components

gradio-app/gradio · GHSA-rhm9-gp5p-5248

critical2024-11-06

CVE-2024-10082-codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service

ericsson/codechecker · GHSA-fpm5-2wcj-vfr7

critical2024-11-06

CVE-2024-10081-codechecker vulnerable to authentication bypass when using specifically crafted URLs

ericsson/codechecker · GHSA-f3f8-vx3w-hp5q