Skip to content
Fencer Intel

All · packagist

Newest first, late arrivals on top. Also a feed.

  1. 3.1
    CVE-2024-47780 Information Disclosure in TYPO3 Page Tree
    packagist
  2. 7.5
    CVE-2024-45293 XML External Entity Reference (XXE) in PHPSpreadsheet's XLSX reader
    WordPresspackagist
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  3. 5.4
    CVE-2024-45292 PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks
    packagist
  4. 6.3
    CVE-2024-45291 Path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheet
    packagist
  5. 7.7
    CVE-2024-45290 Path traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheet
    packagist
  6. 6.1
    CVE-2024-47817 Unvalidated paragraph widget values can be used for Cross-site Scripting in lara-zeus
    packagist
  7. 7.1
    CVE-2024-45060 Unauthenticated Cross-Site-Scripting (XSS) in sample file in PHPSpreadsheet
    packagist
  8. 7.1
    CVE-2024-45932 Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name
    packagist
  9. 6.1
    CVE-2024-28710 LimeSurvey Cross Site Scripting vulnerability
    packagistbitnami
  10. 6.1
    CVE-2024-28709 LimeSurvey Cross Site Scripting vulnerability
    packagistbitnami
  11. 6.1
    CVE-2024-47847 Various XSSes found in Cargo
    packagist
  12. 6.1
    CVE-2024-47765 Minecraft MOTD Parser's HtmlGenerator vulnerable to XSS
    packagist
  13. 5.3
    CVE-2024-47913 Improper permissions handling in MediaWiki AbuseFilter
    packagist
  14. 6.1
    CVE-2024-47617 Reflected XSS Vulnerability in Sulu Media Bundle
    packagist
  15. 5.4
    CVE-2024-47618 Sulu vulnerable to XSS via uploaded SVG
    packagist
  16. 9.8
    CVE-2024-13280 Persistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-044
    packagist
  17. 9.8
    CVE-2024-13279 Two-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-043
    packagist
  18. 9.1
    CVE-2024-13278 Diff - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-042
    packagist
  19. 4.8
    CVE-2024-45964 Zenario Cross Site Scripting in the Image library
    packagist
  20. 4.7
    CVE-2024-45962 October allows an admin account to upload PDF containing malicious JavaScript
    packagist
  21. 4.8
    CVE-2024-45960 Zenario allows authenticated admin users to upload PDF files containing malicious code
    packagist
  22. 7.5
    CVE-2024-47523 LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature
    packagist
  23. 7.2
    CVE-2024-47524 LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name
    packagist
  24. 7.5
    CVE-2024-47525 Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php
    packagist
    EPSS 29.6% chance of exploitation in 30 days, percentile 98%
  25. 3.5
    CVE-2024-47526 LibreNMS has a Self-XSS ('Cross-site Scripting') in librenms/includes/html/modal/alert_template.inc.php
    packagist
  26. 7.5
    CVE-2024-47527 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php
    packagist
  27. 4.8
    CVE-2024-47528 LibreNMS Contains a Stored XSS via File Upload
    packagist
  28. 4.7
    CVE-2024-45967 Pagekit Cross-site Scripting vulnerability
    packagist
  29. 5.4
    CVE-2024-47536 starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
    packagist
  30. 6.5
    CVE-2024-45792 MantisBT vulnerable to information disclosure with user profiles
    packagist