CVE-2023-2983 Privilege Defined With Unsafe Actions in pimcore/pimcore

Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2954

Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...

CVE-2023-2954

CVE-2023-2954 is a stored XSS in the DjangoBlog project liangliangyy/djangoblog prior to master. Connected sources confirm the vulnerability arises from handling Markdown comments, enabling script execution when users view or interact with comments. PoCs and documented payloads exist (Huntr, etc....

CVE-2023-2948

Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...

Authorization

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2948 Cross-site Scripting (XSS) - Generic in openemr/openemr

Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2950

CVE-2023-2950 affects OpenEMR prior to 7.0.1 and is tied to improper authorization that enables an HTML-injection vulnerability through the patient portal API. Specifically, the PUT endpoint /openemr/portal/patient/api/onsitedocument/{id} accepts a fullDocument payload; a malicious user can modif...

CVE-2023-2950 Improper Authorization in openemr/openemr

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2950 Improper Authorization in openemr/openemr

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2947

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

Improper access control

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2945

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1...

Code injection

Code Injection in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2946 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2944 Improper Access Control in openemr/openemr

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2943 Code Injection in openemr/openemr

Code Injection in GitHub repository openemr/openemr prior to 7.0.1...