CVE-2022-2815

CVE-2022-2815 affects Publify/publify versions prior to 9.2.10 due to insecure storage of sensitive information in the GitHub repository. The provided sources describe the root cause as insecure storage, implying potential disclosure of sensitive data. Remediation: upgrade to version 9.2.10 or la...

CVE-2023-0299

CVE-2023-0299 involves Publify/publify with an improper input validation vulnerability in the GitHub repository, prior to version 9.2.10. The connected sources consistently describe this as an input validation error that affects Publify when processing article fields (e.g., title and post fields)...

CVE-2023-0301: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301...

CVE-2022-1812 Integer Overflow or Wraparound in publify/publify

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10...

CVE-2022-1812 Integer Overflow or Wraparound in publify/publify

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10...

CVE-2023-0289

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

CVE-2023-0288

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-0288

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-0288 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-0288

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-0288 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189...

CVE-2023-0289 Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

CVE-2023-0289 Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar

Cross-site Scripting XSS - Stored in GitHub repository craigk5n/webcalendar prior to master...

CVE-2023-0247

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...

Code injection

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...

Session fixation

Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36...

CVE-2023-0247 Uncontrolled Search Path Element in bits-and-blooms/bloom

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1...

Fedora 36 : vim (2023-208f2107d5)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-208f2107d5 advisory. Security fix for CVE-2023-0049 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2023-0247

CVE-2023-0247 affects the Go library bits-and-blooms/bloom, with versions prior to 3.3.1 vulnerable to an Uncontrolled Search Path Element. The issue originates from how the application resolves search paths, enabling potential path hijacking. Affected product/version: bits-and-blooms/bloom befor...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1238)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...