6604 matches found
CVE-2023-3083
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3083 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3086 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3073
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3070
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3069
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8...
Default credentials
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8...
Stripe: The `stripe/veneur` GitHub repository links to a domain `veneur.org`, which is not under stripe's control
The stripe/veneur GitHub repository contained a link to an external domain, veneur.org, which was not under Stripe's control. This posed a security risk as the domain could be exploited for phishing or supply chain contamination attacks. The link has since been removed from the repository, but ma...
CVE-2023-3067
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
CVE-2023-3074 Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3073 Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
CVE-2023-3067 Cross-site Scripting (XSS) - Stored in zadam/trilium
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
CVE-2023-3070 Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3067
CVE-2023-3067 is a stored XSS vulnerability affecting Trilium Notes (zadam/trilium) in versions prior to 0.59.4. The issue arises from a stored XSS condition when a user creates a note and its name (title) is rendered in the UI (Note Map functionality), allowing scripts to be stored and later exe...
PT-2023-22888 · Tsolucio · Tsolucio/Corebos
Name of the Vulnerable Software and Affected Versions: tsolucio/corebos versions prior to 8 Description: The issue concerns an unverified password change in the GitHub repository tsolucio/corebos. Recommendations: For versions prior to 8, update to version 8 or later to resolve the issue...