6762 matches found
CVE-2023-0743 Cross-site Scripting (XSS) - Generic in answerdev/answer
Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0744 Improper Access Control in answerdev/answer
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0747 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...
CVE-2023-0744 Improper Access Control in answerdev/answer
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0741: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0743 Cross-site Scripting (XSS) - Generic in answerdev/answer
Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0744
CVE-2023-0744 affects the GitHub repo answerdev/answer prior to version 1.0.4, enabling an Improper Access Control that can lead to account takeover via the password-reset flow. Public references describe an endpoint abuse: an attacker can trigger password reset via answer/api/v1/user/password/re...
CVE-2023-0744 Improper Access Control in answerdev/answer
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0748 Open Redirect in btcpayserver/btcpayserver
Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6...
CVE-2023-0736
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0735 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0736 Cross-site Scripting (XSS) - Stored in wallabag/wallabag
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0735 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0736 Cross-site Scripting (XSS) - Stored in wallabag/wallabag
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
Amazon Linux AMI : vim-common, vim-data, vim-enhanced (ALAS-2023-1681)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1681 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0882. CVE-2022-4292 Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 Tenable has extracted the preceding...
CVE-2023-0678
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...
Authorization
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...
froxlor is vulnerable to privilege escalation from customer to root via directory-options
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...