CVE-2023-3553 Exposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3552 Improper Encoding or Escaping of Output in nilsteampassnet/teampass

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3552

The CVE-2023-3552 entry concerns TeamPass (nilsteampassnet/teampass) prior to version 3.0.10, where improper encoding or escaping of output enables cross-site scripting in folder names. The root cause is insufficient encoding/escaping of outputs, allowing injection of malicious content into the i...

CVE-2023-3551 Code Injection in nilsteampassnet/teampass

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3551 Code Injection in nilsteampassnet/teampass

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3532 Cross-site Scripting (XSS) - Stored in outline/outline

Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...

TeamPass Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

GHSA-PWRW-G29Q-3MP8 TeamPass Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

Apache InLong has Weak Password Requirements in Apache InLong

Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong from 1.1.0 through 1.6.0. When users change their password to a simple password with any character or symbol, attackers can easily guess the user's password and access the accoun...

CVE-2023-3523

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

Design/Logic Flaw

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3523

CVE-2023-3523 affects gpac/gpac prior to 2.2.2. The vulnerability is an out-of-bounds read (input length/size handling). Documented risk indicators align with local/low-complexity access with user interaction, but no explicit remediation or patch version is provided in the supplied sources. Explo...

CVE-2023-3523 Out-of-bounds Read in gpac/gpac

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3523 Out-of-bounds Read in gpac/gpac

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3523 Out-of-bounds Read in gpac/gpac

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling

Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...

CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling

Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...

CVE-2023-3521 Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling

Cross-site Scripting XSS - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4...

CVE-2023-3520 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6...

code.gitea.io/gitea Open Redirect vulnerability

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4. This is most likely a post-auth redirect plus it is a POST based request scenario, so less likely that can be exploited or chained with other bugs that can cause phishing or credential theft...