CVE-2023-0744 Improper Access Control in answerdev/answer

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0744 Improper Access Control in answerdev/answer

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0748 Open Redirect in btcpayserver/btcpayserver

Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...

CVE-2023-0744

CVE-2023-0744 affects the GitHub repo answerdev/answer prior to version 1.0.4, enabling an Improper Access Control that can lead to account takeover via the password-reset flow. Public references describe an endpoint abuse: an attacker can trigger password reset via answer/api/v1/user/password/re...

CVE-2023-0743 Cross-site Scripting (XSS) - Generic in answerdev/answer

Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0742 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...

CVE-2023-0736

Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...

CVE-2023-0736 Cross-site Scripting (XSS) - Stored in wallabag/wallabag

Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...

CVE-2023-0735 Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.5.4...

CVE-2023-0735 Cross-Site Request Forgery (CSRF) in wallabag/wallabag

Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.5.4...

CVE-2023-0736 Cross-site Scripting (XSS) - Stored in wallabag/wallabag

Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...

Amazon Linux AMI : vim-common, vim-data, vim-enhanced (ALAS-2023-1681)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1681 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0882. CVE-2022-4292 Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 Tenable has extracted the preceding...

CVE-2023-0678

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...

Authorization

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...

froxlor is vulnerable to privilege escalation from customer to root via directory-options

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...

Code injection

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...

CVE-2023-0678 Missing Authorization in phpipam/phpipam

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...

CVE-2023-0678

PHPIPAM

CVE-2023-0676 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1...

CVE-2023-0677 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1...