Security advisories

high2024-10-08

CVE-2024-38229-Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability

dotnet/aspnetcore · GHSA-7vw9-cfwx-9gx9

low2024-10-08

CVE-2024-47780-Information Disclosure in TYPO3 Page Tree

typo3-cms/backend · GHSA-rf5m-h8q9-9w6q

medium2024-10-08

CVE-2024-21533-ggit is vulnerable to Arbitrary Argument Injection via the clone() API

bahmutov/ggit · GHSA-pr45-cg4x-ff4m

medium2024-10-08

CVE-2024-21532-ggit is vulnerable to Command Injection via the fetchTags(branch) API

bahmutov/ggit · GHSA-62cx-5xj4-wfm4

medium2024-10-07

CVE-2024-28709-LimeSurvey Cross Site Scripting vulnerability

limesurvey/limesurvey · GHSA-c7xm-rwqj-pgcj

medium2024-10-07

CVE-2024-45932-Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name

krayin/laravel-crm · GHSA-74q2-6jp4-3rqq

medium2024-10-07

CVE-2024-28710-LimeSurvey Cross Site Scripting vulnerability

limesurvey/limesurvey · GHSA-632q-77qj-c89q

high2024-10-07

CVE-2024-45293-XXE in PHPSpreadsheet's XLSX reader

phpoffice/phpspreadsheet · GHSA-6hwr-6v2f-3m88

medium2024-10-07

CVE-2024-45292-PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks

phpoffice/phpspreadsheet · GHSA-r8w8-74ww-j4wh

medium2024-10-07

CVE-2024-45291-PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled

phpoffice/phpspreadsheet · GHSA-w9xv-qf98-ccq4

high2024-10-07

CVE-2024-45290-PhpSpreadsheet allows absolute path traversal and Server-Side Request Forgery when opening XLSX file

phpoffice/phpspreadsheet · GHSA-5gpr-w2p5-6m37

medium2024-10-07

Saltcorn Server Stored Cross-Site Scripting (XSS) in event logs page

saltcorn/saltcorn · GHSA-pf56-h9qf-rxq4

high2024-10-07

CVE-2024-47818-Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability

saltcorn/saltcorn · GHSA-43f3-h63w-p6f6

medium2024-10-07

CVE-2024-47817-Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS

lara-zeus/dynamic-dashboard · GHSA-c6cw-g7fc-4gwc

medium2024-10-07

CVE-2024-45060-PhpSpreadsheet has an Unauthenticated Cross-Site-Scripting (XSS) in sample file

phpoffice/phpspreadsheet · GHSA-v66g-p9x6-v98p

medium2024-10-05

CVE-2024-47847-Mediawiki Cargo extension vulnerable to Cross-site Scripting

wikimedia/mediawiki-extensions-cargo · GHSA-jqvm-9xm2-gc38

medium2024-10-05

CVE-2024-47913-Improper permissions handling in MediaWiki AbuseFilter

wikimedia/mediawiki-extensions-abusefilter · GHSA-rmcp-9fhq-58pv

low2024-10-04

CVE-2024-47764-cookie accepts cookie name, path, and domain with out of bounds characters

jshttp/cookie · GHSA-pxg6-pf52-xh8x

medium2024-10-04

CVE-2024-47765-Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS

jgniecki/minecraftmotdparser · GHSA-q898-frwq-f3qp

high2024-10-04

CVE-2024-47183-Parse Server's custom object ID allows to acquire role privileges

parse-community/parse-server · GHSA-8xq9-g7ch-35hg