SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2023:0211-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0211-1 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 - Heap-based...

CVE-2023-0512

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...

CVE-2023-0512

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...

Design/Logic Flaw

Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10...

Code injection

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

Default credentials

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

GHSA-PM72-27MG-FC28 Froxlor contains Weak Password Requirements

Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10...

CVE-2023-0572 Unchecked Error Condition in froxlor/froxlor

Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10...

CVE-2023-0565

CVE-2023-0565 targets Froxlor/Froxlor prior to version 2.0.10, with the described issue arising from business logic errors in the repository. Connected sources consistently identify the affected software and the remediation: upgrade to version 2.0.10 or later to resolve the issue. The available d...

CVE-2023-0569 Weak Password Requirements in publify/publify

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

CVE-2023-0565 Business Logic Errors in froxlor/froxlor

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

CVE-2023-0569 Weak Password Requirements in publify/publify

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

Improper Certificate Validation in pyload-ng

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

Withdrawn Advisory: HTML injections in BTCPayServer

Withdrawn Advisory This advisory has been withdrawn because all of the files affected by this vulnerability lie in the BTCPayServer folder, which is not in the NuGet ecosystem. The BTCPayServer folder, corresponding to the BTCPayServer NuGet entry, does not contain any files that were changed to...

Cross-site Scripting in pyload-ng

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

GHSA-C467-5C2G-JP86 Cross-site Scripting in modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

GHSA-WCM6-WV95-7JW6 Cross-site Scripting in pyload-ng

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

GHSA-33GV-RVGQ-GPXP Withdrawn Advisory: HTML injections in BTCPayServer

Withdrawn Advisory This advisory has been withdrawn because all of the files affected by this vulnerability lie in the BTCPayServer folder, which is not in the NuGet ecosystem. The BTCPayServer folder, corresponding to the BTCPayServer NuGet entry, does not contain any files that were changed to...

GHSA-JM3M-WR3P-HJRQ Cross-site Scripting in modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...