6764 matches found
CVE-2023-5862 Missing Authorization in hamza417/inure
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
CVE-2023-5862 Missing Authorization in hamza417/inure
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
CVE-2023-5861 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-5833
Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...
Input validation
Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...
CVE-2023-5833 Improper Access Control in mintplex-labs/anything-llm
Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...
CVE-2023-5833
The connected Huntr document provides concrete details for CVE-2023-5833: an improper access control flaw in mintplex-labs/anything-llm prior to 0.1.0 that allows overwriting backend environment variables via the /api/system/update-env endpoint. The vulnerability arises from how KEY_MAPPING expos...
CVE-2023-5832 Improper Input Validation in mintplex-labs/anything-llm
Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...
CVE-2023-5832 Improper Input Validation in mintplex-labs/anything-llm
Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...
Default credentials
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0...
CVE-2023-5844 Unverified Password Change in pimcore/admin-ui-classic-bundle
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0...
CVE-2023-5844 Unverified Password Change in pimcore/admin-ui-classic-bundle
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0...
CVE-2023-5842 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...
CVE-2023-5842 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...
CVE-2023-5842 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...
CVE-2023-5842
Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...
CVE-2023-5840
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9...
Default credentials
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9...
Privilege escalation
Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9...
CVE-2023-5840 Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9...