Amazon Linux AMI : vim-common, vim-data, vim-enhanced (ALAS-2023-1681)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1681 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0882. CVE-2022-4292 Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 Tenable has extracted the preceding...

CVE-2023-0678

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...

Authorization

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...

froxlor is vulnerable to privilege escalation from customer to root via directory-options

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...

Code injection

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...

CVE-2023-0678

PHPIPAM

CVE-2023-0677 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1...

CVE-2023-0678 Missing Authorization in phpipam/phpipam

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...

CVE-2023-0676 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1...

Input validation

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...

CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex

Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...

CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...

GHSA-Q9P5-W2V9-6WXF Apache InLong contains Out-of-bounds Read vulnerability

Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 to solve it...

CVE-2023-0609

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0610

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

Authorization

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...

CVE-2023-0607

Cross-site Scripting XSS - Stored in GitHub repository projectsend/projectsend prior to r1606...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository projectsend/projectsend prior to r1606...

CVE-2023-0606

Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...

CVE-2023-0607

CVE-2023-0607 is a stored XSS vulnerability in the GitHub-hosted projectsend/projectsend prior to release r1606. Public sources (CNVD/CNNVD/Red Hat and OSV) describe an injection that could let attackers execute arbitrary JavaScript in an administrator account, affecting versions before r1606. Th...