Security advisories

low2024-10-02

CVE-2024-45962-October allows an admin account to upload PDF containing malicious JavaScript

octobercms/october · GHSA-hxpp-g76m-qhvg

low2024-10-02

CVE-2024-45960-Zenario allows authenticated admin users to upload PDF files containing malicious code

tribalsystems/zenario · GHSA-3636-hx62-pv26

low2024-10-02

CVE-2024-45964-Zenario Cross Site Scripting in the Image library

tribalsystems/zenario · GHSA-2cc5-429x-p387

medium2024-10-02

CVE-2024-9440-Slim Select has potential Cross-site Scripting issue

brianvoe/slim-select · GHSA-qvqv-mcxr-x8qw

medium2024-10-02

CVE-2024-47529-OpenC3 stores passwords in clear text (`GHSL-2024-129`)

openc3/cosmos · GHSA-4xqv-47rm-37mm

high2024-10-02

CVE-2024-46977-OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)

openc3/cosmos · GHSA-8jxr-mccc-mwg8

medium2024-10-02

CVE-2024-43795-OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)

openc3/cosmos · GHSA-vfj8-5pj7-2f9g

medium2024-10-02

Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP

inventree/inventree · GHSA-vx3h-qwqw-r2wq

high2024-10-02

CVE-2024-33662-Portainer improperly uses an encryption algorithm in the AesEncrypt function

portainer/portainer · GHSA-9mjw-79r6-c9m8

medium2024-10-01

CVE-2024-47609-Tonic has remotely exploitable denial of service vulnerability

hyperium/tonic · GHSA-4jwc-w2hc-78qv

low2024-10-01

CVE-2024-47528-LibreNMS vulnerable to Stored Cross-site Scripting via File Upload

librenms/librenms · GHSA-x8gm-j36p-fppf

medium2024-10-01

CVE-2024-9341-Link Following in github.com/containers/common

containers/common · GHSA-mc76-5925-c5p6

high2024-10-01

CVE-2024-9355-Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability

golang-fips/openssl · GHSA-3h3x-2hwv-hr52

medium2024-10-01

CVE-2024-47523-LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature

librenms/librenms · GHSA-7f84-28qh-9486

high2024-10-01

CVE-2024-47524-LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name

librenms/librenms · GHSA-fc38-2254-48g7

medium2024-10-01

CVE-2024-47525-LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Rules" feature

librenms/librenms · GHSA-j2j9-7pr6-xqwv

low2024-10-01

CVE-2024-47526-LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Templates" feature

librenms/librenms · GHSA-gcgp-q2jq-fw52

medium2024-10-01

CVE-2024-47527-LibreNMS has Stored Cross-site Scripting vulnerability in "Device Dependencies" feature

librenms/librenms · GHSA-rwwc-2v8q-gc9v

high2024-10-01

CVE-2024-41673-Decidim has a cross-site scripting vulnerability in the version control page

decidim/decidim · GHSA-cc4g-m3g7-xmw8

high2024-10-01

CVE-2024-47534-Incorrect delegation lookups can make go-tuf download the wrong artifact

theupdateframework/go-tuf · GHSA-4f8r-qqr9-fq8j