Input validation

An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated network-based attacker to cause an integrity impact in connected networks. If the SIP ALG is configured and a device receives a...

CVE-2023-5564 Cross-site Scripting (XSS) - Stored in froxlor/froxlor

Cross-site Scripting XSS - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1...

vrite Input Validation Error Vulnerability

vrite is an open source collaborative space from vrite, Inc. for creating, managing, and deploying product documentation, technical blogs, and knowledge bases. An input validation error vulnerability exists in vrite versions prior to 0.3.0, which stems from the presence of an input validation err...

vrite Code Issues Vulnerabilities

vrite is an open source collaborative space for creating, managing and deploying product documentation, technical blogs and knowledge bases from vrite, Inc. A code issue vulnerability exists in vrite versions prior to 0.3.0 that stems from the presence of a Server Request Forgery SSRF vulnerabili...

CVE-2023-27315

SnapGathers versions prior to 4.9 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext domain user credentials...

CVE-2023-5556 Cross-site Scripting (XSS) - Reflected in structurizr/onpremises

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194...

CVE-2023-5555 Cross-site Scripting (XSS) - Generic in frappe/lms

Cross-site Scripting XSS - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4...

CVE-2023-5554

Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0...

CVE-2023-5554

Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0...

NetApp SnapGathers Security Breach

NetApp SnapGathers is a unified, scalable data protection platform from Network Appliance NetApp. A security vulnerability exists in NetApp SnapGathers versions prior to 4.9, which stems from a vulnerability that allows a locally authenticated attacker to discover plaintext domain user credential...

PT-2023-21063 · Unknown · Snapgathers

Name of the Vulnerable Software and Affected Versions: SnapGathers versions prior to 4.9 Description: The issue allows a local authenticated attacker to discover plaintext domain user credentials. Recommendations: For versions prior to 4.9, update to version 4.9 or later to resolve the issue...

CVE-2023-5535

Use After Free in GitHub repository vim/vim prior to v9.0.2010...

CVE-2023-5535 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to v9.0.2010...

CVE-2023-5535 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to v9.0.2010...

CVE-2023-5520

CVE-2023-5520 is a concrete vulnerability: an out-of-bounds read in gpac/gpac prior to 2.2.2 (GPAC MP4Box). The NVD CVSS v3.1 vector indicates LOCAL access, no user interaction, with high impact to confidentiality (C:H) and availability (A:H); integrity impact is none. Affected component is the G...

SUSE CVE-2023-5486

Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Low...

AZL-35297 CVE-2023-44487 affecting package telegraf for versions less than 1.27.3-3

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-39603 CVE-2023-44487 affecting package cri-o for versions less than 1.21.7-2

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-31519 CVE-2023-44487 affecting package golang for versions less than 1.20.10

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-31304 CVE-2023-44487 affecting package cri-tools for versions less than 1.28.0-2

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...