https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:08:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-204890 EUVD-2026-204890 https://cve.radiocsirt.org/vuln/euvd-2026-204890 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6804 <p>Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.</p> <p>Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6804 https://cve.radiocsirt.org/vuln/ghsa-64q3-rq3x-xvfj <p>Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.</p> <p>Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.</p> https://cve.radiocsirt.org/vuln/ghsa-64q3-rq3x-xvfj https://cve.radiocsirt.org/vuln/gsd-2023-6804 gsd-2023-6804 https://cve.radiocsirt.org/vuln/gsd-2023-6804 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3210 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um seine Rechte zu erweitern, Informationen preiszugeben, Daten zu manipulieren und Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um seine Rechte zu erweitern, Informationen preiszugeben, Daten zu manipulieren und Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3210