20598 matches found
CVE-2023-6909
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...
CVE-2023-41318
matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker could upload a malicious piece of media to the media repo, which would then be served with Content-Disposition: inline upon download. This vulnerability could b...
CVE-2023-4005
Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5...
CVE-2023-6889
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17...
CVE-2023-3982
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3822
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3820
SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3672
Cross-site Scripting XSS - DOM in GitHub repository plaidweb/webmention.js prior to 0.5.5...
CVE-2023-4655
Cross-site Scripting XSS - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1...
CVE-2023-4652
Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
CVE-2023-3565
Cross-site Scripting XSS - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3532
Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...
CVE-2023-3523
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3531
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3520
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6...
CVE-2023-3515
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4...
[SECURITY] Fedora 41 Update: rpm-ostree-2025.8-1.fc41
rpm-ostree is a hybrid image/package system. It supports "composing" packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many "pure" image systems, with rpm-ostree each client system can layer on additiona...
CVE-2023-3423
Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0...
CVE-2023-3401
An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to create repositories with malicious code...