CVE-2023-0607 Cross-site Scripting (XSS) - Stored in projectsend/projectsend

Cross-site Scripting XSS - Stored in GitHub repository projectsend/projectsend prior to r1606...

CVE-2023-0610 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber

Cross-site Scripting XSS - DOM in GitHub repository microweber/microweber prior to 1.3.2...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2023:0211-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0211-1 advisory. - Updated to version 9.0.1234: - CVE-2023-0433: Fixed an out of bounds memory access that could...

CVE-2023-0512

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...

CVE-2023-0512

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...

Design/Logic Flaw

Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10...

Code injection

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

Default credentials

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

GHSA-PM72-27MG-FC28 Froxlor contains Weak Password Requirements

Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10...

CVE-2023-0565 Business Logic Errors in froxlor/froxlor

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10...

CVE-2023-0572 Unchecked Error Condition in froxlor/froxlor

Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10...

CVE-2023-0569 Weak Password Requirements in publify/publify

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

CVE-2023-0569

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

CVE-2023-0565

CVE-2023-0565 targets Froxlor/Froxlor prior to version 2.0.10, with the described issue arising from business logic errors in the repository. Connected sources consistently identify the affected software and the remediation: upgrade to version 2.0.10 or later to resolve the issue. The available d...

CVE-2023-0569 Weak Password Requirements in publify/publify

Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10...

GHSA-JM3M-WR3P-HJRQ Cross-site Scripting in modoboa

Cross-site Scripting XSS - Stored in GitHub repository modoboa/modoboa prior to 2.0.4...

Improper Certificate Validation in pyload-ng

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

Cross-site Scripting in pyload-ng

Cross-site Scripting XSS - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42...

Withdrawn Advisory: HTML injections in BTCPayServer

Withdrawn Advisory This advisory has been withdrawn because all of the files affected by this vulnerability lie in the BTCPayServer folder, which is not in the NuGet ecosystem. The BTCPayServer folder, corresponding to the BTCPayServer NuGet entry, does not contain any files that were changed to...