Security advisories

high2024-05-15

Cross-site Scripting in eZFind spellcheck

ezsystems/ezfind · GHSA-9cq2-pcgr-8h62

medium2024-05-15

ezsystems/ez-support-tools Failing access control in system info view

ezsystems/ez-support-tools · GHSA-xmp3-7745-g4vj

high2024-05-15

Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS

ezsystems/ezdemo-ls-extension · GHSA-jq9q-6p42-qpr7

high2024-05-15

Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS

ezsystems/demobundle · GHSA-8c85-4rr5-chr4

medium2024-05-15

endroid/qr-code-bundle File Disclosure via logo_path query parameter

endroid/qr-code-bundle · GHSA-mvf6-3f2g-xfxf

medium2024-05-15

Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party library

drupal/drupal · GHSA-qf65-hph9-453r

high2024-05-15

Drupal core Arbitrary PHP code execution

drupal/drupal · GHSA-j66p-fvp2-fxhj

medium2024-05-15

Drupal core uses a vulnerable Third-party library CKEditor

drupal/drupal · GHSA-337w-fxpq-5m34

medium2024-05-15

Drupal core Open Redirect vulnerability

drupal/drupal · GHSA-wxfg-253g-m7r4

high2024-05-15

Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar

drupal/drupal · GHSA-m9fv-whq2-6wmc

medium2024-05-15

Drupal core Access control bypass

drupal/drupal · GHSA-5x28-3f32-x523

medium2024-05-15

Drupal core Denial of Service

drupal/drupal · GHSA-w333-5f96-mjrr

critical2024-05-15

Drupal core Remote Code Execution

drupal/drupal · GHSA-jf8c-36vw-98x4

critical2024-05-15

Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution

drupal/drupal · GHSA-jjx7-8462-w4m4

medium2024-05-15

Drupal Malicious file upload with filenames stating with dot

drupal/drupal · GHSA-58xv-7h9r-mx3c

medium2024-05-15

Drupal Anonymous Open Redirect

drupal/drupal · GHSA-x6v2-xmrq-574j

medium2024-05-15

Drupal Content moderation Access bypass

drupal/drupal · GHSA-86xw-vmcx-9mj4

medium2024-05-15

Drupal External URL injection through URL aliases leading to Open Redirect

drupal/drupal · GHSA-r67r-42wx-c8r7

medium2024-05-15

Drupal core Cross-Site Scripting (XSS) vulnerabilities

drupal/core · GHSA-vfgc-c76h-mwh4

high2024-05-15

Drupal core Arbitrary PHP code execution

drupal/core · GHSA-gxxj-g9v8-w28p