PYSEC-2023-31

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0488

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

CVE-2023-0509

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

Input validation

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

CVE-2023-0519 Cross-site Scripting (XSS) - Stored in modoboa/modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0512 Divide By Zero in vim/vim

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...

CVE-2023-0519 Cross-site Scripting (XSS) - Stored in modoboa/modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0488

CVE-2023-0488 is a Stored XSS in pyload/pyload prior to version 0.5.0b3.dev42. Multiple connected sources (PT-2023-16300, CNNVD, Red Hat, GHSA, OSV, NVD/CVE, CVELIST) describe the issue as a stored XSS in the GitHub repository. The vulnerability affects pyload’s web-facing input handling and can ...

CVE-2023-0512 Divide By Zero in vim/vim

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...

CVE-2023-0519 Cross-site Scripting (XSS) - Stored in modoboa/modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0493 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5...

CVE-2023-0470 Cross-site Scripting (XSS) - Stored in modoboa/modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

CVE-2023-0455 Unrestricted Upload of File with Dangerous Type in unilogies/bumsys

Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta...

CVE-2023-0493 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5...

CVE-2023-0519

CVE-2023-0519 is a stored XSS vulnerability in modoboa/modoboa prior to 2.0.4. The issue arises from user-supplied data being stored and later reflected in the web UI, enabling script execution. Affected component is the modoboa web application (modoboa/modoboa) with versions before 2.0.4. The av...

CVE-2023-0512

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...

CVE-2023-0509 Improper Certificate Validation in pyload/pyload

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

CVE-2023-0470 Cross-site Scripting (XSS) - Stored in modoboa/modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

Updated vim packages fix security vulnerability

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049...

CVE-2023-0433

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225...