https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:01:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-214302 EUVD-2026-214302 https://cve.radiocsirt.org/vuln/euvd-2026-214302 https://cve.radiocsirt.org/vuln/fkie_cve-2023-23761 <p>An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users&#39; secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist&#39;s URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.</p> <p>An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users&#39; secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist&#39;s URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-23761 https://cve.radiocsirt.org/vuln/ghsa-q7wq-398w-6957 <p>An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users&#39; secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist’s URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.</p> <p>An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users&#39; secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist’s URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.</p> https://cve.radiocsirt.org/vuln/ghsa-q7wq-398w-6957 https://cve.radiocsirt.org/vuln/gsd-2023-23761 gsd-2023-23761 https://cve.radiocsirt.org/vuln/gsd-2023-23761 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0905 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0905