Security advisories

critical2024-06-02

CVE-2024-3584-qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint

qdrant/qdrant · GHSA-xcr2-h8hv-6227

high2024-06-02

CVE-2024-36114-Decompressors can crash the JVM and leak memory content in Aircompressor

airlift/aircompressor · GHSA-973x-65j7-xcf4

high2024-06-02

CVE-2024-29415-ip SSRF improper categorization in isPublic

indutny/node-ip · GHSA-2p57-rm9w-gvfp

medium2024-06-02

CVE-2024-35228-Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`

wagtail/wagtail · GHSA-xxfm-vmcf-g33f

low2024-06-02

CVE-2024-35196-Slack integration leaks sensitive information in logs

getsentry/sentry · GHSA-c2g2-gx4j-rj3j

medium2024-06-02

CVE-2024-35189-Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints

ethyca/fides · GHSA-rcvg-jj3g-rj7c

medium2024-06-02

CVE-2024-32877-Reflected Cross-site Scripting in yiisoft/yii2 Debug mode

yiisoft/yii2 · GHSA-qg5r-95m4-mjgj

medium2024-05-31

CVE-2024-34006-Moodle Unsanitized HTML in site log for config_log_created

moodle/moodle · GHSA-vvh5-7v3m-j3mj

high2024-05-31

CVE-2024-34005-Moodle Authenticated LFI risk in some misconfigured shared hosting environments

moodle/moodle · GHSA-r99q-hmqv-xw8w

medium2024-05-31

CVE-2024-34004-Moodle Authenticated LFI risk in some misconfigured shared hosting environments

moodle/moodle · GHSA-q3cm-ccrm-2mr6

high2024-05-31

CVE-2024-34002-Moodle Authenticated LFI risk in some misconfigured shared hosting environments

moodle/moodle · GHSA-mm9p-xwfm-3fqf

medium2024-05-31

CVE-2024-34003-Moodle Authenticated LFI risk in some misconfigured shared hosting environments

moodle/moodle · GHSA-jg4f-8w9x-jv35

high2024-05-31

CVE-2024-34009-Moodle ReCAPTCHA can be bypassed on the login page

moodle/moodle · GHSA-gwf6-q6c2-94p3

medium2024-05-31

CVE-2024-34007-Moodle Logout CSRF in admin/tool/mfa/auth.php

moodle/moodle · GHSA-8g5h-gjwq-w5ch

high2024-05-31

CVE-2024-34008-Moodle CSRF risk in analytics management of models

moodle/moodle · GHSA-68x5-4jg5-gjgg

high2024-05-31

CVE-2024-34001-Moodle CSRF risk in admin preset tool management of presets

moodle/moodle · GHSA-gq9f-8rj4-w7jc

high2024-05-31

CVE-2024-33999-Moodle Improper Input Validation

moodle/moodle · GHSA-r2wx-46gp-rp3h

medium2024-05-31

CVE-2024-34000-Moodle Cross-site Scripting (XSS)

moodle/moodle · GHSA-8qwh-4vwv-7c5m

medium2024-05-31

CVE-2024-33998-Moodle Cross-site Scripting (XSS)

moodle/moodle · GHSA-xqhh-253w-4q5f

medium2024-05-31

CVE-2024-33997-Moodle stored Cross-site Scripting (XSS)

moodle/moodle · GHSA-9qgq-93c7-9hm4