CVE-2023-5353

CVE-2023-5353 affects the GitHub repository salesagility/suitecrm prior to version 7.14.1. The issue is described as improper access control in SuiteCRM, enabling unauthorized access due to insufficient permission checks. Multiple connected sources (Red Hat, OSV, CVE listings, and related vulnera...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5351 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5351 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5351

CVE-2023-5351 is a stored Cross-site Scripting (XSS) vulnerability affecting SuiteCRM versions prior to 7.14.1. The issue arises from storing user input and displaying it without proper validation. Public sources in connected docs confirm affected software (SuiteCRM) and versions (

CVE-2023-5350

CVE-2023-5350 corresponds to a SQL injection in the SuiteCRM project by SalesAgility, arising from improper validation/cleaning of the duplicate_parent_id field. Affected software: SuiteCRM versions prior to 7.14.1. The vulnerability can allow an attacker to execute SQL commands on the database, ...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

GHSA-39M3-CJ8C-886R Dolibarr Cross-site Scripting vulnerability

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.0...

CVE-2023-5323

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0...

Authorization

Missing Authorization in GitHub repository hamza417/inure prior to build94...

CVE-2023-5321 Missing Authorization in hamza417/inure

Missing Authorization in GitHub repository hamza417/inure prior to build94...

CVE-2023-5321 Missing Authorization in hamza417/inure

Missing Authorization in GitHub repository hamza417/inure prior to build94...

GHSA-J5WW-5XF4-HQM2 phpMyFAQ Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

GHSA-5JWV-M8H3-69CG phpMyFaq Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

Hardcoded credentials

Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-5320 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5317

CVE-2023-5317 is a stored Cross-site Scripting (XSS) vulnerability in the phpMyFAQ project (thorsten/phpmyfaq) prior to version 3.1.18. The issue affects the web-facing input handling that can lead to script execution when data is stored and later rendered. Multiple advisories corroborate this XS...