6716 matches found
CVE-2023-3142
Summary of CVE-2023-3142 Vulnerability: Cross-site Scripting (XSS) stored in microweber/microweber prior to 2.0, including 1.3.4 and earlier. What’s affected: Microweber web application; the issue is triggered by stored input that is later displayed (notably on the Editing page). Root cause: Stor...
CVE-2023-3109
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
CVE-2023-3109 Cross-site Scripting (XSS) - Stored in admidio/admidio
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
CVE-2023-3095
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3095 Improper Access Control in nilsteampassnet/teampass
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3095 Improper Access Control in nilsteampassnet/teampass
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
GHSA-C6FV-3JM9-6R8F TeamPass vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3083
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3083 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3086 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3073
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3070
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3069
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8...
Default credentials
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8...
Stripe: The `stripe/veneur` GitHub repository links to a domain `veneur.org`, which is not under stripe's control
The stripe/veneur GitHub repository contained a link to an external domain, veneur.org, which was not under Stripe's control. This posed a security risk as the domain could be exploited for phishing or supply chain contamination attacks. The link has since been removed from the repository, but ma...