6716 matches found
CVE-2023-2972 Prototype Pollution in antfu/utils
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2954
Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...
CVE-2023-2954
Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...
CVE-2023-2954
CVE-2023-2954 is a stored XSS in the DjangoBlog project liangliangyy/djangoblog prior to master. Connected sources confirm the vulnerability arises from handling Markdown comments, enabling script execution when users view or interact with comments. PoCs and documented payloads exist (Huntr, etc....
CVE-2023-2948
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1...
Authorization
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2948 Cross-site Scripting (XSS) - Generic in openemr/openemr
Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950
CVE-2023-2950 affects OpenEMR prior to 7.0.1 and is tied to improper authorization that enables an HTML-injection vulnerability through the patient portal API. Specifically, the PUT endpoint /openemr/portal/patient/api/onsitedocument/{id} accepts a fullDocument payload; a malicious user can modif...
CVE-2023-2950 Improper Authorization in openemr/openemr
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950 Improper Authorization in openemr/openemr
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2947
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
Improper access control
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2945
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1...
Code injection
Code Injection in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2944 Improper Access Control in openemr/openemr
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...