31502 matches found
CVE-2020-10518
A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the...
CVE-2020-10516
An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior t...
CVE-2020-10517
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not allow unauthorized access to any repository conten...
CVE-2020-10519
A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the...
CVE-2023-4189
Cross-site Scripting XSS - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4756
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-4721
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-4190
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11...
CVE-2023-4127
Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1...
CVE-2023-4653
Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4455
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.6.3...
CVE-2023-4877
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92...
CVE-2023-4778
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-4434
Missing Authorization in GitHub repository hamza417/inure prior to build88...
CVE-2023-4650
Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4560
Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...
CVE-2023-4878
Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-4755
Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV...