6679 matches found
CVE-2023-3009
CVE-2023-3009 describes a stored XSS vulnerability in the TeamPass project nilsteampassnet/teampass, present in versions before 3.0.9. The issue allows injecting JavaScript via an item name stored in a shared folder, triggering code execution for other users with folder access. Connected sources ...
CVE-2023-3013 Unchecked Return Value in gpac/gpac
Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-2984
Path Traversal: '..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22...
Path traversal
Path Traversal: '..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22...
Privilege escalation
Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...
antfu/utils vulnerable to prototype pollution
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2972
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
Code injection
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2983 Privilege Defined With Unsafe Actions in pimcore/pimcore
Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...
CVE-2023-2972 Prototype Pollution in antfu/utils
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2954
Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...
CVE-2023-2954
CVE-2023-2954 is a stored XSS in the DjangoBlog project liangliangyy/djangoblog prior to master. Connected sources confirm the vulnerability arises from handling Markdown comments, enabling script execution when users view or interact with comments. PoCs and documented payloads exist (Huntr, etc....
CVE-2023-2948
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...
Authorization
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950 Improper Authorization in openemr/openemr
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950
CVE-2023-2950 affects OpenEMR prior to 7.0.1 and is tied to improper authorization that enables an HTML-injection vulnerability through the patient portal API. Specifically, the PUT endpoint /openemr/portal/patient/api/onsitedocument/{id} accepts a fullDocument payload; a malicious user can modif...