Security advisories

medium2024-08-14

CVE-2024-39404-Magento Improper Authorization vulnerability

magento/magento2 · GHSA-qrh3-vxjg-h9h6

high2024-08-14

CVE-2024-39398-Magento does not properly restrict excessive authentication attempts

magento/magento2 · GHSA-q628-54wg-4r5q

high2024-08-14

CVE-2024-39403-Magento Stored Cross-Site Scripting (XSS) vulnerability

magento/magento2 · GHSA-mmp7-8cg4-9wrg

high2024-08-14

CVE-2024-39401-Magento OS Command ('OS Command Injection') vulnerability

magento/magento2 · GHSA-8frp-pxq2-3gpq

high2024-08-14

CVE-2024-39399-Magento Path Traversal vulnerability

magento/magento2 · GHSA-7r99-8wqp-h7pc

medium2024-08-14

CVE-2024-39405-Magento Improper Authorization vulnerability

magento/magento2 · GHSA-5g9f-7gqc-8hj4

high2024-08-14

CVE-2024-39400-Magento DOM-based Cross-Site Scripting (XSS) vulnerability

magento/magento2 · GHSA-52fg-wjxm-pp44

high2024-08-14

CVE-2024-39402-Magento OS Command ('OS Command Injection') vulnerability

magento/magento2 · GHSA-2ff6-837j-hg5x

critical2024-08-13

CVE-2024-42360-Command Injection in sequenceserver

wurmlab/sequenceserver · GHSA-qv32-5wm2-p32h

high2024-08-13

CVE-2024-38168-Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability

dotnet/aspnetcore · GHSA-7qrv-8f9x-3h32

medium2024-08-13

CVE-2024-38167-Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability

dotnet/runtime · GHSA-3r34-r6w3-fqp6

medium2024-08-13

CVE-2024-42368-open-telemetry has an Observable Timing Discrepancy

open-telemetry/opentelemetry-collector-contrib · GHSA-rfxf-mf63-cpqv

high2024-08-12

CVE-2024-42485-Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint

pxlrbt/filament-excel · GHSA-m3px-vjxr-fx4m

medium2024-08-12

CVE-2024-42474-Path traveral in Streamlit on windows

streamlit/streamlit · GHSA-rxff-vr5r-8cj5

high2024-08-12

CVE-2024-41909-Apache MINA SSHD: integrity check bypass

apache/mina-sshd · GHSA-2326-hx7g-3m9r

medium2024-08-12

CVE-2024-42482-fish-shop/syntax-check Improper Neutralization of Delimiters

fish-shop/syntax-check · GHSA-xj87-mqvh-88w2

critical2024-08-12

CVE-2024-42480-RBAC Roles for `etcd` created by Kamaji are not disjunct

clastix/kamaji · GHSA-6r4j-4rjc-8vw5

low2024-08-12

CVE-2024-7512-Concrete CMS vulnerable to Stored Cross-site Scripting

concretecms/concretecms · GHSA-c47w-9mcf-w972

medium2024-08-12

CVE-2024-4350-Concrete CMS Stored Cross-site Scripting vulnerability

concretecms/concretecms · GHSA-q5wx-m95r-4cgc

critical2024-08-12

CVE-2024-38989-Prototype pollution in izatop bunt

izatop/bunt · GHSA-p734-xg27-8cfq