2021-09-23

2021-09-24

2021-09-25

All (2) Critical (2) High (11) Medium (9)

CVE-2021-22869 Sep 24, 18:15 CRITICAL Act Now

An improper access control vulnerability in GitHub Enterprise Server allowed a workflow job to execute in a self-hosted runner group it should not have had access to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Information Disclosure Github Enterprise Server

NVD GitHub

CVSS 3.1

9.8

EPSS

1.2%

CVE-2021-40102 Sep 24, 15:15 CRITICAL Act Now

An issue was discovered in Concrete CMS through 8.5.5. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Deserialization Concrete Cms Concretecms

NVD

CVSS 3.1

9.1

EPSS

1.3%