CVE-2023-3069

The CVE-2023-3069 entry concerns coreBOS (tsolucio/corebos) up to version 8, affected by an unverified password change vulnerability in the account password change feature. The underlying issue is bypass of password length and complexity validation, enabling an attacker to change a password witho...

CVE-2023-3073 Cross-site Scripting (XSS) - Stored in tsolucio/corebos

Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...

CVE-2023-3026

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...

CVE-2023-3026 Cross-site Scripting (XSS) - Stored in jgraph/drawio

Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

nilsteampassnet/teampass vulnerable to cross-site scripting

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. This enables an attacker to inject malicious code into a shared folder, which can then be executed by other users who have access to the folder...

Null pointer dereference

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-2999

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

CVE-2023-3012 NULL Pointer Dereference in gpac/gpac

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...

SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2023:2320-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2320-1 advisory. Updated to version 3.6.14: - CVE-2023-2855: Fixed a crash in the Candump log file parser...

CVE-2023-3012 NULL Pointer Dereference in gpac/gpac

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3013

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3009 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3013

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

CVE-2023-3009

CVE-2023-3009 describes a stored XSS vulnerability in the TeamPass project nilsteampassnet/teampass, present in versions before 3.0.9. The issue allows injecting JavaScript via an item name stored in a shared folder, triggering code execution for other users with folder access. Connected sources ...