Security advisories

medium2024-02-09

CVE-2023-31506-Cross-site scripting (XSS) vulnerability in Grav

getgrav/grav · GHSA-xrf8-cmrg-7436

high2024-02-09

CVE-2023-25365-October CMS Cross-site Scripting vulnerability

octobercms/october · GHSA-gcgj-qh8p-57hm

high2024-02-08

CVE-2024-1329-HashiCorp Nomad vulnerable to symlink attacks

hashicorp/nomad · GHSA-c866-8gpw-p3mv

high2024-02-08

CVE-2024-25817-eza Potential Heap Overflow Vulnerability for AArch64

eza-community/eza · GHSA-3qx3-6hxr-j2ch

high2024-02-08

CVE-2023-32192-Rancher API Server Cross-site Scripting Vulnerability

rancher/apiserver · GHSA-833m-37f7-jq55

high2024-02-08

CVE-2023-32193-Norman API Cross-site Scripting Vulnerability

rancher/norman · GHSA-r8f4-hv23-6qp6

high2024-02-08

CVE-2023-22649-Rancher 'Audit Log' leaks sensitive information

rancher/rancher · GHSA-xfj7-qf8w-2gcr

high2024-02-08

CVE-2023-32194-Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'

rancher/rancher · GHSA-c85r-fwc7-45vc

high2024-02-08

CVE-2024-1314-Kinto Attachment's attachments can be replaced on read-only records

kinto/kinto-attachment · GHSA-hvp4-vrv2-8wrq

low2024-02-08

CVE-2023-42282-NPM IP package incorrectly identifies some private IP addresses as public

indutny/node-ip · GHSA-78xj-cgh5-2h22

high2024-02-08

PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

nirbar/wix4 · GHSA-8v28-3g86-chj5

high2024-02-08

Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

nirbar/wix3 · GHSA-259p-rvjx-ffwg

high2024-02-08

CVE-2024-24810-WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

wixtoolset/wix · GHSA-7wh2-wxc7-9ph5

critical2024-02-08

CVE-2024-24825-DIRAC's TokenManager does not check permissions on cached tokens

diracgrid/dirac · GHSA-59qj-jcjv-662j

high2024-02-08

CVE-2024-24113-XXL-JOB vulnerable to Server-Side Request Forgery

xuxueli/xxl-job · GHSA-c352-x843-ggpq

high2024-02-08

CVE-2024-24821-Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php

composer/composer · GHSA-7c6p-848j-wh5h

medium2024-02-08

CVE-2024-25144-Liferay Portal denial-of-service vulnerability

liferay/liferay-portal · GHSA-w275-m8cr-hf2v

high2024-02-08

CVE-2024-25148-Liferay Portal vulnerable to user impersonation

liferay/liferay-portal · GHSA-qwj8-qgpr-8crm

medium2024-02-08

CVE-2024-25146-Liferay Portal allows attackers to discover the existence of sites

liferay/liferay-portal · GHSA-mqf8-4cqm-p83x

medium2024-02-08

CVE-2023-47798-Liferay Portal's account lockout does not invalidate existing user sessions

liferay/liferay-portal · GHSA-2mx7-xvfg-fg53