GHSA-W52V-V783-GW97 Ghost has a SQL injection in Content API

Impact A SQL injection vulnerability existed in Ghost's Content API that allowed unauthenticated attackers to read arbitrary data from the database. Vulnerable Versions This vulnerability is present in Ghost v3.24.0 to v6.19.0. Patches v6.19.1 contains a fix for this issue. Note: as this...

PT-2025-3164 · Cfengine · Cfengine Enterprise Mission Portal

Name of the Vulnerable Software and Affected Versions: CFEngine Enterprise Mission Portal versions 3.21.5 and below CFEngine Enterprise Mission Portal version 3.24.0 Description: The issue allows for XSS. The estimated number of potentially affected devices worldwide is not available. There is no...