5186 matches found
CVE-2023-43641: Out-of-bounds Write
libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...
PT-2023-5873 · Libcue +6 · Libcue +6
Name of the Vulnerable Software and Affected Versions: libcue versions 2.2.1 and prior Description: The issue is related to out-of-bounds array access in libcue, which provides an API for parsing and extracting data from CUE sheets. A user of the GNOME desktop environment can be exploited by...
[SECURITY] [DLA 3607-1] gnome-boxes update for DLA-3606-1
Debian LTS Advisory DLA-3607-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost October 07, 2023 https://wiki.debian.org/LTS Package : gnome-boxes Version : 3.30.3-2+deb10u1 CVE ID : Debian Bug : It has been found that the update of freerdp2 see DLA-3606-1 exposed a b...
CVE-2023-5286
A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...
CVE-2023-5286
A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...
CVE-2023-5286 SourceCodester Expense Tracker App Category add_category.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...
CVE-2023-5286
The CVE-2023-5286 entry affects SourceCodester Expense Tracker App v1, specifically the Category Handler’s add_category.php where manipulating the category_name parameter causes cross-site scripting (XSS). Descriptions across multiple sources confirm remote exploitation potential and public discl...
CVE-2023-5286 SourceCodester Expense Tracker App Category add_category.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...
Expense Tracker Cross-Site Scripting Vulnerability
Expense Tracker is an expense tracker organized by SourceCode and Projects. A cross-site scripting vulnerability exists in Expense Tracker v1. The vulnerability stems from the fact that incorrect manipulation of the parameter categoryname can lead to cross-site scripting...
CVE-2023-5286: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file addcategory.php of the component Category Handler. The manipulation of the argument categoryname leads to cross site...
PT-2023-32007 · Sourcecodester · Sourcecodester Expense Tracker App
Name of the Vulnerable Software and Affected Versions: SourceCodester Expense Tracker App version 1 Description: A problematic issue has been found in the file add category.php of the component Category Handler. The manipulation of the category name argument leads to cross site scripting. The...
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
Cross site scripting
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is reported vulnerable to Cross Site Scripting (XSS) via the add category action (CVE-2023-44048). The CVSS base score is 5.4 (Medium) with network attack vector, low privileges required, user interaction required, and scope changed; impact is limited to conf...
CVE-2023-44048
Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting XSS via add category...
PT-2023-29083
Name of the Vulnerable Software and Affected Versions Sourcecodester Expense Tracker App version 1 Description The issue is related to Cross Site Scripting XSS via the add category feature. This means an attacker could potentially inject malicious scripts into the application, affecting users who...