Security advisories

medium2024-05-31

CVE-2024-33996-Moodle broken access control when setting calendar event type

moodle/moodle · GHSA-4qww-rxq6-x7gf

medium2024-05-31

CVE-2022-25037-wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function

wangeditor-team/wangeditor · GHSA-9hfw-cvf4-5x25

critical2024-05-31

CVE-2024-5565-Vanna prompt injection code execution

vanna-ai/vanna · GHSA-7735-w2jp-gvg6

medium2024-05-31

CVE-2024-37032-Ollama does not validate the format of the digest (sha256 with 64 hex digits)

ollama/ollama · GHSA-8hqg-whrw-pv92

medium2024-05-30

TYPO3 Frontend vulnerable to Unauthenticated Path Disclosure

typo3/typo3 · GHSA-pqfv-97hj-g97g

medium2024-05-30

TYPO3 Brute Force Protection Bypass in backend login

typo3/typo3 · GHSA-jqr8-q455-xx45

medium2024-05-30

TYPO3 Information Disclosure Vulnerability Exploitable by Editors

typo3/typo3 · GHSA-r287-hc8j-w56h

medium2024-05-30

TYPO3 Cross-Site Scripting Vulnerability Exploitable by Editors

typo3/typo3 · GHSA-wp8j-c736-c5r3

high2024-05-30

TYPO3 frontend login vulnerable to Session Fixation

typo3/typo3 · GHSA-r9vc-jfmh-6j48

high2024-05-30

TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts

typo3/typo3 · GHSA-4r76-xr68-w7m7

high2024-05-30

TYPO3 possible cache poisoning on the homepage when anchors are used

typo3/typo3 · GHSA-p84g-j2gh-83g3

medium2024-05-30

ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting

typo3/typo3 · GHSA-mxjf-hc9v-xgv2

medium2024-05-30

CVE-2024-5520-OpenCMS Cross-Site Scripting vulnerability

alkacon/opencms-core · GHSA-vg6x-pchq-98mg

high2024-05-30

TYPO3 Arbitrary Shell Execution in Swiftmailer library

typo3/typo3 · GHSA-45xg-4w5x-j429

high2024-05-30

TYPO3 Possible Insecure Deserialization in Extbase Request Handling

typo3-cms/core · GHSA-5h5v-m596-r6rf

medium2024-05-30

TYPO3 Cross-Site Scripting in Filelist Module

typo3-cms/core · GHSA-6xwf-7rfm-4gwc

high2024-05-30

CVE-2024-21512-mysql2 vulnerable to Prototype Pollution

sidorares/node-mysql2 · GHSA-pmh2-wpjm-fj45

medium2024-05-30

TYPO3 Cross-Site Scripting in Link Handling

typo3-cms/core · GHSA-4ppr-jw47-9qm5

medium2024-05-30

TYPO3 Cross-Site Scripting in Form Framework validation handling

typo3-cms/core · GHSA-95qm-3xp7-vfj5

high2024-05-30

TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API

typo3-cms/core · GHSA-x428-565f-8xj2