CVE-2023-3515

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4...

[SECURITY] Fedora 41 Update: rpm-ostree-2025.8-1.fc41

rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additiona...

CVE-2023-3423

Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0...

CVE-2023-3401

An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to create repositories with malicious code...

CVE-2023-3398

Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3...

CVE-2023-3393

Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1...

CVE-2023-3293

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

CVE-2023-3291

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3229

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3230

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3224

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3...

CVE-2023-3218

Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5...

CVE-2023-3191

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3188

Server-Side Request Forgery SSRF in GitHub repository owncast/owncast prior to 0.1.0...

CVE-2023-3172

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-31543

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

CVE-2023-3109

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3095

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3086

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3083

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...