6574 matches found
CVE-2023-4979
Cross-site Scripting XSS - Reflected in GitHub repository librenms/librenms prior to 23.9.0...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
Code injection
Code Injection in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4982
CVE-2023-4982 is a stored XSS in librenms/librenms prior to 23.9.0. The vulnerability arises from insufficient sanitization/escaping of HTML characters, notably in includes/html/pages/search/fdb.inc.php (per Veracode). Exploitation can lead to cookie theft or user account compromise, or redirecti...
CVE-2023-4981 Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4978 Cross-site Scripting (XSS) - DOM in librenms/librenms
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4977
CVE-2023-4977 describes a code injection vulnerability in the LibreNMS project (librenms/librenms) prior to version 23.9.0. The root cause is insufficient sanitization in the search functionality (notably in search.inc.php), which can allow code injection/HTML injection. Multiple connected source...
CVE-2023-4977 Code Injection in librenms/librenms
Code Injection in GitHub repository librenms/librenms prior to 23.9.0...
PT-2023-31372 · Librenms · Librenms
Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository librenms/librenms. Recommendations: For versions prior to 23.9.0, update to version 23.9.0 or later ...
CVE-2023-4928
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...
Sql injection
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...
CVE-2023-4928 SQL Injection in instantsoft/icms2
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...
CVE-2023-4928 SQL Injection in instantsoft/icms2
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...
CVE-2023-4913
Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4913 Cross-site Scripting (XSS) - Reflected in cecilapp/cecil
Cross-site Scripting XSS - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4898
Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...
Sql injection
SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...
CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm
SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...