Filters
Versions
2.9.0-beta1
9
2.9.0-beta2
9
2.9.0-beta3
9
2.9.0-beta4
9
2.9.0-beta5
9
2.9.0-beta6
9
2.9.0-beta7
9
2.9.0-beta8
8
2.9.0-beta10
7
2.9.0-beta9
7
2.8.0-beta1
6
2.8.0-beta2
6
2.8.0-beta3
6
2.9.0-beta11
5
3.2.0-beta1
5
2.4.0-beta1
4
2.4.0-beta2
4
2.7.0-beta1
4
2.8.0-beta10
4
2.8.0-beta4
4
2.8.0-beta5
4
2.8.0-beta6
4
2.8.0-beta7
4
2.8.0-beta8
4
2.8.0-beta9
4
2.9.0-beta12
4
2.9.0-beta13
4
2.9.0-beta14
4
3.0.0-beta15
4
1.1.0-beta1
3
1.1.0-beta2
3
1.1.0-beta3
3
1.1.0-beta4
3
1.1.0-beta5
3
1.1.0-beta6
3
1.1.0-beta6b
3
1.1.0-beta7
3
1.1.0-beta8
3
1.2.0-beta1
3
1.2.0-beta2
3
1.2.0-beta3
3
1.2.0-beta4
3
1.2.0-beta5
3
1.2.0-beta6
3
1.2.0-beta7
3
1.2.0-beta8
3
1.2.0-beta9
3
1.3.0-beta1
3
1.3.0-beta10
3
1.3.0-beta11
3
1.3.0-beta2
3
1.3.0-beta3
3
1.3.0-beta4
3
1.3.0-beta5
3
1.3.0-beta6
3
1.3.0-beta7
3
1.3.0-beta8
3
1.3.0-beta9
3
1.4.0-beta1
3
1.4.0-beta10
3
1.4.0-beta11
3
1.4.0-beta12
3
1.4.0-beta2
3
1.4.0-beta3
3
1.4.0-beta4
3
1.4.0-beta5
3
1.4.0-beta6
3
1.4.0-beta7
3
1.4.0-beta8
3
1.4.0-beta9
3
1.5.0-beta1
3
1.5.0-beta10
3
1.5.0-beta11
3
1.5.0-beta12
3
1.5.0-beta13
3
1.5.0-beta13b
3
1.5.0-beta14
3
1.5.0-beta2
3
1.5.0-beta3
3
1.5.0-beta4
3
1.5.0-beta5
3
1.5.0-beta6
3
1.5.0-beta7
3
1.5.0-beta8
3
1.5.0-beta9
3
1.6.0-beta1
3
1.6.0-beta10
3
1.6.0-beta11
3
1.6.0-beta12
3
1.6.0-beta2
3
1.6.0-beta3
3
1.6.0-beta4
3
1.6.0-beta5
3
1.6.0-beta6
3
1.6.0-beta7
3
1.6.0-beta8
3
1.6.0-beta9
3
1.7.0-beta1
3
1.7.0-beta10
3
1.7.0-beta11
3
1.7.0-beta2
3
1.7.0-beta3
3
1.7.0-beta4
3
1.7.0-beta5
3
1.7.0-beta6
3
1.7.0-beta7
3
1.7.0-beta8
3
1.7.0-beta9
3
1.8.0-beta1
3
1.8.0-beta10
3
1.8.0-beta11
3
1.8.0-beta12
3
1.8.0-beta13
3
1.8.0-beta2
3
1.8.0-beta3
3
1.8.0-beta4
3
1.8.0-beta5
3
1.8.0-beta6
3
1.8.0-beta7
3
1.8.0-beta8
3
1.8.0-beta9
3
1.9.0-beta1
3
1.9.0-beta10
3
1.9.0-beta11
3
1.9.0-beta12
3
1.9.0-beta13
3
1.9.0-beta14
3
1.9.0-beta15
3
1.9.0-beta16
3
1.9.0-beta17
3
1.9.0-beta2
3
1.9.0-beta3
3
1.9.0-beta4
3
1.9.0-beta5
3
1.9.0-beta6
3
1.9.0-beta7
3
1.9.0-beta8
3
1.9.0-beta9
3
2.0.0-beta1
3
2.0.0-beta10
3
2.0.0-beta2
3
2.0.0-beta3
3
2.0.0-beta4
3
2.0.0-beta5
3
2.0.0-beta6
3
2.0.0-beta7
3
2.0.0-beta8
3
2.0.0-beta9
3
2.1.0-beta1
3
2.1.0-beta2
3
2.1.0-beta3
3
2.1.0-beta4
3
2.1.0-beta5
3
2.1.0-beta6
3
2.2.0-beta1
3
2.2.0-beta10
3
2.2.0-beta2
3
2.2.0-beta3
3
2.2.0-beta4
3
2.2.0-beta5
3
2.2.0-beta6
3
2.2.0-beta7
3
2.2.0-beta8
3
2.2.0-beta9
3
2.3.0-beta1
3
2.3.0-beta10
3
2.3.0-beta11
3
2.3.0-beta2
3
2.3.0-beta3
3
2.3.0-beta4
3
2.3.0-beta5
3
2.3.0-beta6
3
2.3.0-beta7
3
2.3.0-beta8
3
2.3.0-beta9
3
2.4.0-beta10
3
2.4.0-beta11
3
2.4.0-beta3
3
2.4.0-beta4
3
2.4.0-beta5
3
2.4.0-beta6
3
2.4.0-beta7
3
2.4.0-beta8
3
2.4.0-beta9
3
2.5.0-beta1
3
2.5.0-beta2
3
2.5.0-beta3
3
2.5.0-beta4
3
2.5.0-beta5
3
2.5.0-beta6
3
2.5.0-beta7
3
2.6.0-beta1
3
2.6.0-beta2
3
2.6.0-beta3
3
2.6.0-beta4
3
2.6.0-beta5
3
2.6.0-beta6
3
2.7.0-beta2
3
2.7.0-beta3
3
2.7.0-beta4
3
2.7.0-beta5
3
2.7.0-beta6
3
2.7.0-beta7
3
2.7.0-beta8
3
2.7.0-beta9
3
2.8.0-beta11
3
3.1.0-beta1
3
3.1.0-beta2
3
3.1.1
3
3.1.0
2
3.1.0-beta5
2
3.1.0-beta6
2
3.2.0-beta2
2
3.4.0
2
2.6.0
1
2.7.5
1
2.8.10
1
2.8.6
1
2.8.7
1
3.0.0-beta16
1
3.1.0-beta3
1
3.1.0-beta7
1
3.1.0-beta8
1
3.2.0-beta3
1
3.3.0-beta1
1
3.3.0-beta2
1
3.3.0-beta3
1
3.3.0-beta4
1
3.4.0-beta1
1
Discourse DiscourseDenial of service by the absence of restrictions on replies to posts in Discourse
7.5
First published (updated )
Discourse DiscourseBypass of email address validation via encoded email addresses in Discourse
8.2
First published (updated )
Discourse DiscourseDiscourse vulnerable to DoS via Tag Group
7.5
First published (updated )
Discourse DiscourseDiscourse vulnerable to unlimited mentioned users in message serializer
8.6
First published (updated )
Discourse DiscourseDiscourse DoS through Onebox favicon URL
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Discourse DiscourseUnauthenticated access to new private chat messages in Discourse
7.5
First published (updated )
Discourse DiscourseMalicious requests can fill up the log files resulting in a deinal of service in Discourse
7.5
First published (updated )
Discourse DiscourseCross-site Scripting via email preview when CSP disabled in Discourse
8
First published (updated )
Discourse DiscourseDiscourse vulnerable to ossible DDoS due to unbounded limits in various controller actions
7.5
First published (updated )
Discourse DiscourseDenial of service via User Custom Sidebar Section Unlimited Link Creation in discourse
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Discourse DiscourseDiscourse vulnerable to Cross-site Scripting in local oneboxes
8.8
First published (updated )
Discourse DiscourseDiscourse vulnerable to Cross-site Scripting through pending post titles descriptions
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Discourse DiscourseDiscourse password reset link can lead to in account takeover if user changes to a new email
8.1
First published (updated )
Discourse DiscourseDiscourse allows self-XSS through malicious composer message
7.1
First published (updated )
Discourse DiscoursePossible Server-Side Request Forgery (SSRF) in webhooks
7.6
First published (updated )
Discourse DiscourseDiscourse user account takeover via email and invite link
8.9
First published (updated )
Discourse DiscourseDiscourse moderators can edit themes via the API
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Discourse DiscourseDiscourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimit…
7.2
First published (updated )
Discourse DiscourseEmail activation route can be abused by spammers in Discourse
7.5
First published (updated )
Discourse DiscourseUser can bypass approval when invited to Discourse
8.8
First published (updated )
Discourse DiscoursePrivate message title and participating users leaked in discourse
7.5
First published (updated )
Discourse DiscourseRe-use of email tokens in Discourse
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Discourse DiscourseXSS via d-popover and d-html-popover attribute
7.4
First published (updated )
Discourse DiscourseIn Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for c…
7.5
First published (updated )
Discourse DiscourseDiscourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via …
7.5
First published (updated )