6604 matches found
CVE-2023-3552 Improper Encoding or Escaping of Output in nilsteampassnet/teampass
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3551 Code Injection in nilsteampassnet/teampass
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3551 Code Injection in nilsteampassnet/teampass
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
CVE-2023-3532 Cross-site Scripting (XSS) - Stored in outline/outline
Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...
TeamPass Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
GHSA-PWRW-G29Q-3MP8 TeamPass Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...
Apache InLong has Weak Password Requirements in Apache InLong
Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.1.0 through 1.6.0. When users change their password to a simple password with any character or symbol, attackers can easily guess the user's password and access the accoun...
CVE-2023-3523
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...
Design/Logic Flaw
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3523 Out-of-bounds Read in gpac/gpac
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3523
CVE-2023-3523 affects gpac/gpac prior to 2.2.2. The vulnerability is an out-of-bounds read (input length/size handling). Documented risk indicators align with local/low-complexity access with user interaction, but no explicit remediation or patch version is provided in the supplied sources. Explo...
CVE-2023-3523 Out-of-bounds Read in gpac/gpac
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3523 Out-of-bounds Read in gpac/gpac
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling
Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...
CVE-2023-3520 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6...
GHSA-CF6V-9J57-V6R6 code.gitea.io/gitea Open Redirect vulnerability
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft...
code.gitea.io/gitea Open Redirect vulnerability
Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft...