CVE-2023-5520

Removed by vendor...

CVE-2023-5520 Out-of-bounds Read in gpac/gpac

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-5520 Out-of-bounds Read in gpac/gpac

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-5511 Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Cross-Site Request Forgery CSRF in GitHub repository snipe/snipe-it prior to v.6.2.3...

CVE-2023-5498 Cross-Site Request Forgery (CSRF) in chiefonboarding/chiefonboarding

Cross-Site Request Forgery CSRF in GitHub repository chiefonboarding/chiefonboarding prior to v2.0.47...

Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6420-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6420-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening ...

GHSA-RR5C-69C9-GJ9F Cross-site Scripting in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

Cross-site Scripting in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

Amazon Linux AMI : vim (ALAS-2023-1837)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1837 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 Use After Free in GitHub repository vim/vim prior to 9.0.1857. CVE-2023-4750 Use After Free in GitHub repository vim/vi...

CVE-2023-5441

NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960...

CVE-2023-5441

CVE-2023-5441 is a NULL Pointer Dereference in vim/vim prior to commit 20d161ace307e28690229b68584f2d84556f8960. The vulnerability affects Vim; the root cause is a NULL pointer dereference in the code path related to Vim’s execution flow. A fix is available in a later Vim release; remediation is ...

CVE-2023-5441 NULL Pointer Dereference in vim/vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960...

CVE-2023-5377

Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV...

CVE-2023-5377

CVE-2023-5377 is an out-of-bounds read in the GitHub repository gpac/gpac, affecting versions prior to 2.2.2-DEV. The issue is documented across multiple feeds and vendor trackers, indicating the affected component is the gpac library code handling memory reads. Mitigation per the PT-2023-32077 e...

CVE-2023-5377

Removed by vendor...

CVE-2023-5375 Open Redirect in mosparo/mosparo

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...

CVE-2023-5375 Open Redirect in mosparo/mosparo

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...

[SECURITY] Fedora 37 Update: prrte-2.0.2-5.fc37

PRRTE is the PMIx Reference Run Time Environment. The project is formally referred to in documentation by "PRRTE", and the GitHub repository is "openpmix/prrte". However, we have found that most users do not like typing the two consecutive "r"s in the name. Hence, all of the internal API symbols,...