6762 matches found
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12...
CVE-2023-0878
Cross-site Scripting XSS - Generic in GitHub repository nuxt/framework prior to 3.2.1...
CVE-2023-0878 Cross-site Scripting (XSS) - Generic in nuxt/framework
Cross-site Scripting XSS - Generic in GitHub repository nuxt/framework prior to 3.2.1...
CVE-2023-0877
CVE-2023-0877 affects Froxlor prior to 2.0.11. Affected component: Froxlor software; vulnerability type: Code Injection (as described in multiple sources). Root cause details are not exhaustively described in the provided documents, but the CVE is reported with a Network attack vector and high im...
CVE-2023-0878 Cross-site Scripting (XSS) - Generic in nuxt/framework
Cross-site Scripting XSS - Generic in GitHub repository nuxt/framework prior to 3.2.1...
Input validation
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer
Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...
CVE-2023-0860
CVE-2023-0860 affects the GitHub repository modoboa/modoboa-installer, with the vulnerability present in versions prior to 2.0.4. The issue arises from an improper restriction of excessive authentication attempts, as documented across multiple sources. The CVSS indicates a High impact (availabili...
CVE-2023-0866 Heap-based Buffer Overflow in gpac/gpac
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV...
SUSE CVE-2022-1379
URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the different security profiles and achieve server side request forgery SSRF. This allows accessing restricted internal resources/servers or...
SUSE CVE-2022-2054
Code Injection in GitHub repository nuitka/nuitka prior to 0.9...
SUSE CVE-2022-2343
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044...
SUSE CVE-2022-2522
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061...
SUSE CVE-2022-2862
Use After Free in GitHub repository vim/vim prior to 9.0.0221...
GHSA-3W96-P6VH-C298 Cross-site Scripting in pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 1.5.17...
CVE-2023-0827
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 1.5.17...
CVE-2023-0827 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 1.5.17...
CVE-2023-0827 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 1.5.17...
CVE-2023-0827
CVE-2023-0827 concerns a Stored XSS vulnerability in pimcore/pimcore prior to version 1.5.17. The issue originates from storing unvalidated user input, enabling injection of malicious scripts within Pimcore’s web application. Affected component is the Pimcore CMS/pimcore repository, with public r...