CVE-2023-5441

CVE-2023-5441 is a NULL Pointer Dereference in vim/vim prior to commit 20d161ace307e28690229b68584f2d84556f8960. The vulnerability affects Vim; the root cause is a NULL pointer dereference in the code path related to Vim’s execution flow. A fix is available in a later Vim release; remediation is ...

CVE-2023-5441 NULL Pointer Dereference in vim/vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960...

CVE-2023-5377

Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV...

CVE-2023-5377

Removed by vendor...

CVE-2023-5377

CVE-2023-5377 is an out-of-bounds read in the GitHub repository gpac/gpac, affecting versions prior to 2.2.2-DEV. The issue is documented across multiple feeds and vendor trackers, indicating the affected component is the gpac library code handling memory reads. Mitigation per the PT-2023-32077 e...

CVE-2023-5375 Open Redirect in mosparo/mosparo

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...

CVE-2023-5375 Open Redirect in mosparo/mosparo

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2...

[SECURITY] Fedora 37 Update: prrte-2.0.2-5.fc37

PRRTE is the PMIx Reference Run Time Environment. The project is formally referred to in documentation by "PRRTE", and the GitHub repository is "openpmix/prrte". However, we have found that most users do not like typing the two consecutive "r"s in the name. Hence, all of the internal API symbols,...

[SECURITY] Fedora 38 Update: prrte-2.0.2-5.fc38

PRRTE is the PMIx Reference Run Time Environment. The project is formally referred to in documentation by "PRRTE", and the GitHub repository is "openpmix/prrte". However, we have found that most users do not like typing the two consecutive "r"s in the name. Hence, all of the internal API symbols,...

SUSE SLES12 Security Update : vim (SUSE-SU-2023:3942-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3942-1 advisory. Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflistaltfpos bsc1215004. - CVE-2023-4734: Fixed segmentation...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2023:3955-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3955-1 advisory. Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflistaltfpos bsc1215004. -...

Improper access control

Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5353 Improper Access Control in salesagility/suitecrm

Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5353

CVE-2023-5353 affects the GitHub repository salesagility/suitecrm prior to version 7.14.1. The issue is described as improper access control in SuiteCRM, enabling unauthorized access due to insufficient permission checks. Multiple connected sources (Red Hat, OSV, CVE listings, and related vulnera...

CVE-2023-5353 Improper Access Control in salesagility/suitecrm

Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.14.1...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5351 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5351

CVE-2023-5351 is a stored Cross-site Scripting (XSS) vulnerability affecting SuiteCRM versions prior to 7.14.1. The issue arises from storing user input and displaying it without proper validation. Public sources in connected docs confirm affected software (SuiteCRM) and versions (

CVE-2023-5351 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5350

CVE-2023-5350 corresponds to a SQL injection in the SuiteCRM project by SalesAgility, arising from improper validation/cleaning of the duplicate_parent_id field. Affected software: SuiteCRM versions prior to 7.14.1. The vulnerability can allow an attacker to execute SQL commands on the database, ...