32287 matches found
CVE-2024-2443
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring GeoJSON settings. Exploitation of this vulnerability required access to the GitHub...
GHSA-F46Q-GMG5-36HM vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-QPXX-2FWX-F5QJ vulnerabilities
Vulnerabilities for packages: pgbouncer...
GHSA-C6CM-5GC7-C3F4 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-3MGP-FX93-9XV5 vulnerabilities
Vulnerabilities for packages: grafana...
GHSA-64X6-Q8PQ-XJMG vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-G23H-7VF9-XC25 vulnerabilities
Vulnerabilities for packages: difftastic...
GHSA-F7VH-QWP3-X37M vulnerabilities
Vulnerabilities for packages: druid...
GHSA-QF7C-7R9H-MM92 vulnerabilities
Vulnerabilities for packages: sonarqube, ruby4.0-elasticsearch, elasticsearch-fips...
GHSA-RWVC-J5JR-MGVH vulnerabilities
Vulnerabilities for packages: kibana...
GHSA-6HWG-W5JG-9C6X vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, rancher-machine...
GHSA-8Q63-W3PX-VG38 vulnerabilities
Vulnerabilities for packages: ffmpeg...
PT-2026-1633
Name of the Vulnerable Software and Affected Versions Easy GitHub Gist Shortcodes plugin for WordPress versions prior to 1.0 Description The Easy GitHub Gist Shortcodes plugin for WordPress is susceptible to Stored Cross-Site Scripting through the id parameter of the gist shortcode. Insufficient...
WordPress Easy GitHub Gist Shortcodes plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Easy GitHub Gist Shortcodes versions = 1.0...
CVE-2025-13744
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...
CVE-2025-13744
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...
CVE-2025-13744 Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...
CVE-2025-13744 Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...
CVE-2025-13744
CVE-2025-13744 affects GitHub Enterprise Server. The issue is an Improper Neutralization of Input During Web Page Generation in the Filter (search) component, allowing attacker-controlled HTML to be rendered across GitHub and potentially exfiltrate sensitive information. An attacker must have per...
