Security Advisories | GitStock

low2023-06-23

CVE-2023-3303-Admidio Improper Access Control vulnerability

admidio/admidio · GHSA-vmxg-wx6c-4f3r

high2023-06-23

CVE-2023-3302-Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability

admidio/admidio · GHSA-hm75-8w6h-4f8f

high2023-06-23

CVE-2023-30260-RaspAP raspap-webgui Command Injection vulnerability

raspap/raspap-webgui · GHSA-hhqm-f4m4-pq39

high2023-06-23

CVE-2023-31469-Apache StreamPipes Improper Privilege Management vulnerability

apache/streampipes · GHSA-pm73-x2h5-cmj3

high2023-06-22

CVE-2023-35133-Moodle vulnerable to Server Side Request Forgery

moodle/moodle · GHSA-xxp4-mf4h-6cwm

critical2023-06-22

CVE-2023-32571-Dynamic Linq vulnerable to remote code execution

zzzprojects/system.linq.dynamic.core · GHSA-w65q-jcmv-28gj

critical2023-06-22

CVE-2023-3128-Grafana vulnerable to Authentication Bypass by Spoofing

grafana/grafana · GHSA-mpv3-g8m3-3fjc

medium2023-06-22

CVE-2023-35131-Moodle vulnerable to Cross-site Scripting

moodle/moodle · GHSA-fwfj-8p36-rc64

medium2023-06-22

CVE-2023-35132-Moodle vulnerable to SQL Injection

moodle/moodle · GHSA-49mv-vfcp-8gg9

medium2023-06-22

cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`

buckyos/cyfs · GHSA-g753-ghr7-q33w

low2023-06-22

CVE-2023-35931-Shescape potential environment variable exposure on Windows with CMD

ericcornelissen/shescape · GHSA-3g7p-8qhx-mc8r

medium2023-06-22

CVE-2023-25499-Vaadin vulnerable to possible information disclosure in non visible components.

vaadin/platform · GHSA-5f9v-mv5g-jh5q

low2023-06-22

CVE-2023-25500-Vaadin vulnerable to possible information disclosure of class and method names in RPC response

vaadin/platform · GHSA-ch48-9r3q-pv7x

medium2023-06-22

CVE-2023-35925-FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption

intellectualsites/fastasyncworldedit · GHSA-whj9-m24x-qhhp

critical2023-06-22

CVE-2023-35161-XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page

xwiki/xwiki-platform · GHSA-4xm7-5q79-3fch

critical2023-06-22

CVE-2023-35160-XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template

xwiki/xwiki-platform · GHSA-r8xc-xxh3-q5x3

critical2023-06-22

CVE-2023-35159-XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template

xwiki/xwiki-platform · GHSA-x234-mg7q-m8g8

critical2023-06-22

CVE-2023-35158-XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template

xwiki/xwiki-platform · GHSA-mwxj-g7fw-7hc8

high2023-06-22

CVE-2023-35157-XWiki Platform vulnerable to reflected cross-site scripting via delattachment action

xwiki/xwiki-platform · GHSA-phwm-87rg-27qq

critical2023-06-22

CVE-2023-35156-XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template

xwiki/xwiki-platform · GHSA-834c-x29c-f42c