Security advisories

medium2024-08-14

CVE-2024-43368-Trix has a cross-site Scripting vulnerability on copy & paste

basecamp/trix · GHSA-qm2q-9f3q-2vcv

high2024-08-14

CVE-2024-43372-Persistent Cross-site Scripting in eZ Platform Rich Text Field Type

ezsystems/ezplatform-richtext · GHSA-rhm7-7469-rcpw

high2024-08-14

CVE-2024-43369-Persistent Cross-site Scripting in Ibexa RichText Field Type

ibexa/fieldtype-richtext · GHSA-hvcf-6324-cjh7

medium2024-08-14

CVE-2024-43373-webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle

j4k0xb/webcrack · GHSA-ccqh-278p-xq6w

medium2024-08-14

Cosmos Hub (Gaia): The check for the height of cryptographic equivocation evidence is missing

cosmos/gaia · GHSA-83qr-9v2h-qxp4

medium2024-08-14

CVE-2024-42353-WebOb's location header normalization during redirect leads to open redirect

pylons/webob · GHSA-mg3v-6m49-jhp3

medium2024-08-14

CVE-2024-39414-Magento Improper Access Control Leads to Privilege escalation

magento/magento2 · GHSA-x6f9-hv9r-fgq4

medium2024-08-14

CVE-2024-39409-Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability

magento/magento2 · GHSA-rf4q-m23c-7q8r

medium2024-08-14

CVE-2024-39411-Magento Improper Authorization leads to security feature bypass

magento/magento2 · GHSA-qm77-mqf3-fmhq

medium2024-08-14

CVE-2024-39418-Magento Improper Authorization vulnerability

magento/magento2 · GHSA-gvgf-pvh5-vjh4

medium2024-08-14

CVE-2024-39415-Magento Improper Authorization Leading to Security feature bypass

magento/magento2 · GHSA-gj93-84g5-mcjq

medium2024-08-14

CVE-2024-39407-Magento Improper Authorization vulnerability

magento/magento2 · GHSA-cjm6-8mw8-2f8c

medium2024-08-14

CVE-2024-39413-Magento Improper Authorization vulnerability

magento/magento2 · GHSA-8w5f-8992-g86j

medium2024-08-14

CVE-2024-39419-Magento Improper Access Control Leads to Privilege escalation

magento/magento2 · GHSA-74w7-cr4v-wf2v

medium2024-08-14

CVE-2024-39412-Magento Open Source Improper Authorization vulnerability

magento/magento2 · GHSA-7472-vw39-g2j3

medium2024-08-14

CVE-2024-39406-Magento Open Source Path Traversal vulnerability

magento/magento2 · GHSA-6pxh-2557-5cj5

medium2024-08-14

CVE-2024-39417-Magento Improper Authorization leads to Security feature bypass

magento/magento2 · GHSA-4xmj-f664-hv98

medium2024-08-14

CVE-2024-39416-Magento Improper Authorization leads to Security feature bypass

magento/magento2 · GHSA-4xgg-rw35-7mv5

medium2024-08-14

CVE-2024-39408-Magento Open Source Cross-Site Request Forgery vulnerability

magento/magento2 · GHSA-4cj6-f32v-6hgx

medium2024-08-14

CVE-2024-39410-Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability

magento/magento2 · GHSA-4323-f82v-f6jr