BIT-SUITECRM-2023-3293 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm-core

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

BIT-SUITECRM-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core

Cross-Site Request Forgery CSRF in GitHub repository salesagility/suitecrm-core prior to 8.3.1...

BIT-SUITECRM-2023-5350 SQL Injection in salesagility/suitecrm

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1...

BIT-SUITECRM-2023-5351 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

BIT-DISCOURSE-2022-24782 Secure category names leaked via user activity export in Discourse

Discourse is an open source discussion platform. Versions 2.8.2 and prior in the stable branch, 2.9.0.beta3 and prior in the beta branch, and 2.9.0.beta3 and prior in the tests-passed branch are vulnerable to a data leak. Users can request an export of their own activity. Sometimes, due to catego...

BIT-SUITECRM-2023-5353 Improper Access Control in salesagility/suitecrm

Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1...

BIT-SUITECRM-2023-6125 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

BIT-SUITECRM-2023-6126 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

BIT-SUITECRM-2023-6127 Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm

Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

BIT-SUITECRM-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

BIT-SUITECRM-2023-6131 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

BIT-PUBLIFY-2022-0574

Improper Access Control in GitHub repository publify/publify prior to 9.2.8...

BIT-PUBLIFY-2022-1553

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integri...

BIT-PUBLIFY-2022-1810

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9...

BIT-PUBLIFY-2022-1811

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

BIT-PUBLIFY-2022-2815

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10...

BIT-PUBLIFY-2023-0569

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

BIT-PIMCORE-2022-0955

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

BIT-MLFLOW-2022-0736 Insecure Temporary File in mlflow/mlflow

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1...

BIT-OAUTH2-PROXY-2021-21291 Subdomain checking of whitelisted domains could allow unintended redirects

OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers Google, GitHub, and others to validate accounts by email, domain or group. In OAuth2 Proxy before version 7.0.0, for users that use the whitelist domain feature, a domain that ended in...