CVE-2023-3303

Vulnerability CVE-2023-3303 affects admidio/admidio prior to 4.2.9 due to Improper Access Control. Public documents consistently describe an access-control weakness without detailing exploit methods. CVSS data indicate low confidentiality impact with no integrity/availability impact, and network ...

CVE-2023-3293

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

CVE-2023-3293

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

CVE-2023-3291 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3294 Cross-site Scripting (XSS) - DOM in saleor/react-storefront

Cross-site Scripting XSS - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7...

Authorization

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3229 Business Logic Errors in fossbilling/fossbilling

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3229

The vulnerability CVE-2023-3229 affects fossbilling/fossbilling prior to 0.5.0. Concrete details from connected sources show a business-logic flaw that allows continuing to place orders for a product after it has been disabled, via API requests. Root cause: logic that does not correctly enforce p...

CVE-2023-3228 Business Logic Errors in fossbilling/fossbilling

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3229 Business Logic Errors in fossbilling/fossbilling

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3227

CVE-2023-3227 targets fossbilling/fossbilling with insufficient granularity of access control prior to version 0.5.0. Affected component/condition: access-control checks lacking granularity (per multiple sources). Impact is described as insufficient access control, with remediation recommended to...

CVE-2023-3230 Missing Authorization in fossbilling/fossbilling

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3228

CVE-2023-3228 concerns fossbilling/fossbilling prior to 0.5.0 and is evidenced by a risk described in connected Huntr documentation: a business logic flaw where an attacker can modify the product ID during order processing to bypass the main product requirement and directly purchase an addon. Aff...

CVE-2023-3224

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3...

Code injection

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3...

SUSE CVE-2023-3172

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

Amazon Linux 2 : vim (ALAS-2023-2085)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2085 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. CVE-2023-2609 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. CVE-2023-2610 Tenable has...

CVE-2023-3218

OpenITCOCKPIT is affected by CVE-2023-3218 due to a race condition within a thread in the application’s code path prior to version 4.6.5. The vulnerability stems from concurrent thread execution that can lead to inconsistent state or logic errors during operations in the affected release lineage....

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Vim vulnerabilities (USN-6154-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6154-1 advisory. It was discovered that Vim was using uninitialized memory when fuzzy matching, which could lead to invalid...