4412 matches found
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
Cross site scripting
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
Expense Tracker Cross-Site Scripting Vulnerability
Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in the Sourcecodester Expense Tracker App v1 version that stems from vulnerability to SQL injection attacks...
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is reported vulnerable to Cross Site Scripting (XSS) via the add category action (CVE-2023-44048). The CVSS base score is 5.4 (Medium) with network attack vector, low privileges required, user interaction required, and scope changed; impact is limited to conf...
PT-2023-7470 · Gnome +8 · Tracker-Miners +8
Name of the Vulnerable Software and Affected Versions: tracker-miners affected versions not specified Description: A flaw was found in the tracker-miners package, which is part of the GNOME operating system for Linux. The issue is related to a weakness in the sandbox mechanism that allows a...
[SECURITY] [DLA 3572-1] libyang security update
Debian LTS Advisory DLA-3572-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 19, 2023 https://wiki.debian.org/LTS Package : libyang Version : 0.16.105+really1.0-0+deb10u1 CVE ID : CVE-2019-20391 CVE-2019-20392 CVE-2019-20393 CVE-2019-20394 CVE-2019-203...
[SECURITY] [DSA 5501-1] gnome-shell security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5501-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2023 https://www.debian.org/security/faq -...
Debian: Security Advisory (DLA-3567-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-36250
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...
CVE-2023-36250
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...
DEBIAN-CVE-2023-36250
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...
Input validation
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...
UBUNTU-CVE-2023-36250
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...
CVE-2023-36250
CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record...
CVE-2023-36250
The CVE-2023-36250 entry concerns GNOME Time Tracker (version 3.0.2) and describes a CSV injection flaw that allows a local attacker to execute arbitrary code by crafting a .tsv file during record creation. Affected component appears to be the time-tracker input handling for TSVs, with the underl...
GNOME Time Tracker Injection Vulnerability
GNOME Time Tracker GnoTime,GTT is a to-do list/journal/diary tool from GNOME. A security vulnerability exists in GNOME Time Tracker version 3.0.2, which stems from the presence of a CSV injection vulnerability. An attacker can exploit the vulnerability to execute arbitrary code by building a .tsv...
