CVE-2023-0676 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1...

VulnCheck KEV: CVE-2020-9043

The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key...

PT-2022-12321 · Gitea · Gitea

Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.5.1 Description: A Cross Site Scripting XSS issue exists in the repository settings, specifically inside the external wiki/issue tracker URL field. This allows for potential exploitation. No information is provided...

webpack-subresource-integrity data forgery issue vulnerability

webpack-subresource-integrity is a personal developer's npm extension for website static file security. The library generates an encrypted hash code that can be used to verify that files fetched by the browser e.g. from a CDN are secure. A webpack plugin vulnerability exists in versions prior to...

Ledger SAS Ledger Monero app information disclosure vulnerability

Ledger SAS Ledger Monero app is an application for Ledger eWallet device management from Ledger SAS, France. A security vulnerability exists in the Ledger SAS Ledger Monero app versions prior to 1.5.1 for Ledger Nano and Ledger S devices. An attacker could exploit the vulnerability by sending a...

Qolsys IQ Panel Using Hardcoded Encryption Keys Vulnerability

Qolsys IQ Panel is an Android OS based touch screen controller for home automation devices and features. A security vulnerability exists in Qolsys IQ Panel versions prior to 1.5.1. A remote attacker can exploit the vulnerability to create a digital signature for code by cleverly constructing...