https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:59:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187330 EUVD-2026-187330 https://cve.radiocsirt.org/vuln/euvd-2026-187330 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8263 <p>An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in version 3.10.17, 3.11.15, 3.12.9, 3.13.4, and 3.14.1. This vulnerability was reported via the GitHub Bug Bounty program.</p> <p>An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in version 3.10.17, 3.11.15, 3.12.9, 3.13.4, and 3.14.1. This vulnerability was reported via the GitHub Bug Bounty program.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-8263 https://cve.radiocsirt.org/vuln/ghsa-q586-q77x-838f <p>An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in version 3.10.17, 3.11.15, 3.12.9, 3.13.4, and 3.14.1. This vulnerability was reported via the GitHub Bug Bounty program.</p> <p>An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in version 3.10.17, 3.11.15, 3.12.9, 3.13.4, and 3.14.1. This vulnerability was reported via the GitHub Bug Bounty program.</p> https://cve.radiocsirt.org/vuln/ghsa-q586-q77x-838f https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2200 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und erweiterte Rechte zu erlangen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und erweiterte Rechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2200