6604 matches found
CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio
Cross-site Scripting XSS - Reflected in GitHub repository jgraph/drawio prior to 21.6.3...
GHSA-78Q2-CV3P-X9FM Pimcore Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.6.4...
GHSA-VMPV-QJHQ-R463 Pimcore Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3822 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3822 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3821 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3820 SQL Injection in pimcore/pimcore
SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3820 SQL Injection in pimcore/pimcore
SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3819 Exposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcore
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4...
CVE-2023-3819 Exposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcore
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4...
PYSEC-2023-308
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0...
Path traversal
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0...
CVE-2023-3765 Absolute Path Traversal in mlflow/mlflow
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0...
CVE-2023-3765 Absolute Path Traversal in mlflow/mlflow
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0...
CVE-2023-3765
MLflow (mlflow/mlflow) prior to version 2.5.0 contains an Absolute Path Traversal vulnerability. The issue arises in an MLflow repository and can lead to unauthorized access to sensitive information stored on the server. According to the connected sources, the affected component is mlflow/mlflow’...
CVE-2023-3700 Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments
Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0...
CVE-2023-3696
Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4...