6574 matches found
CVE-2023-1703 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
CVE-2023-1701
CVE-2023-1701 concerns Pimcore PIM/Content Management: a reflected XSS in Pimcore (pimcore/pimcore) prior to version 10.5.20, specifically in the Predefined Properties module in Settings. The core issue is an unescaped/insufficiently sanitized input in the affected JavaScript/HTML handling paths ...
CBL Mariner 2.0 Security Update: vim (CVE-2022-3153)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3153 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. CVE-2022-3153 Note that Nessus has not...
CBL Mariner 2.0 Security Update: vim (CVE-2022-3234)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3234 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. CVE-2022-3234 Note that Nessus has no...
CBL Mariner 2.0 Security Update: vim (CVE-2022-1674)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1674 advisory. - NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 in GitHub repository vim/vim prior to...
CBL Mariner 2.0 Security Update: vim (CVE-2022-1629)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1629 advisory. - Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities...
CBL Mariner 2.0 Security Update: vim (CVE-2022-1620)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1620 advisory. - NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 in GitHub repository vim/vim prior to...
CVE-2023-1665
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...
CVE-2023-26493
Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the web-interface-check.yml was subject to command injection. The web-interface-check.yml was triggered when a pull request was opened or updated and...
Input validation
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...
CVE-2023-26493 Command Injection in Cocos Engine workflow
Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the web-interface-check.yml was subject to command injection. The web-interface-check.yml was triggered when a pull request was opened or updated and...
CVE-2023-1654
Denial of Service in GitHub repository gpac/gpac prior to 2.4.0...
CVE-2023-1647
Improper Access Control in GitHub repository calcom/cal.com prior to 2.7...
CVE-2023-1665 Improper Restriction of Excessive Authentication Attempts in linagora/twake
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...
CVE-2023-1655 Heap-based Buffer Overflow in gpac/gpac
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0...
CVE-2023-1654 Denial of Service in gpac/gpac
Denial of Service in GitHub repository gpac/gpac prior to 2.4.0...
CVE-2023-1654
Denial of Service in GitHub repository gpac/gpac prior to 2.4.0...
CVE-2023-1665 Improper Restriction of Excessive Authentication Attempts in linagora/twake
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...
CVE-2023-1176
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2...
PYSEC-2023-29
Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...