CVE-2023-3303 Improper Access Control in admidio/admidio

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

Improper Access Control

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3304 Improper Access Control in admidio/admidio

Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9...

CVE-2023-3293

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

CVE-2023-3293

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

CVE-2023-3294 Cross-site Scripting (XSS) - DOM in saleor/react-storefront

Cross-site Scripting XSS - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7...

CVE-2023-3291 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

Authorization

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3229 Business Logic Errors in fossbilling/fossbilling

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3229

The vulnerability CVE-2023-3229 affects fossbilling/fossbilling prior to 0.5.0. Concrete details from connected sources show a business-logic flaw that allows continuing to place orders for a product after it has been disabled, via API requests. Root cause: logic that does not correctly enforce p...

CVE-2023-3229 Business Logic Errors in fossbilling/fossbilling

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3228 Business Logic Errors in fossbilling/fossbilling

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3230 Missing Authorization in fossbilling/fossbilling

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0...

CVE-2023-3228

CVE-2023-3228 concerns fossbilling/fossbilling prior to 0.5.0 and is evidenced by a risk described in connected Huntr documentation: a business logic flaw where an attacker can modify the product ID during order processing to bypass the main product requirement and directly purchase an addon. Aff...

CVE-2023-3227

CVE-2023-3227 targets fossbilling/fossbilling with insufficient granularity of access control prior to version 0.5.0. Affected component/condition: access-control checks lacking granularity (per multiple sources). Impact is described as insufficient access control, with remediation recommended to...

CVE-2023-3224

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3...

Code injection

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3...

SUSE CVE-2023-3172

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

Amazon Linux 2 : vim (ALAS-2023-2085)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2085 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531. CVE-2023-2609 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. CVE-2023-2610 Tenable has...