CVE-2023-3218

OpenITCOCKPIT is affected by CVE-2023-3218 due to a race condition within a thread in the application’s code path prior to version 4.6.5. The vulnerability stems from concurrent thread execution that can lead to inconsistent state or logic errors during operations in the affected release lineage....

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Vim vulnerabilities (USN-6154-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6154-1 advisory. It was discovered that Vim was using uninitialized memory when fuzzy matching, which could lead to invalid...

CVE-2023-3192 Session Fixation in froxlor/froxlor

Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-3192

CVE-2023-3192 affects froxlor/froxlor versions prior to 2.1.0. The root cause is failure to regenerate session IDs, which may enable session fixation . Documents consistently describe this issue and its impact as an authorization/session management risk. The primary remediation is to upgrade to v...

CVE-2023-3191

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository owncast/owncast prior to 0.1.0...

CVE-2023-3188 Server-Side Request Forgery (SSRF) in owncast/owncast

Server-Side Request Forgery SSRF in GitHub repository owncast/owncast prior to 0.1.0...

CVE-2023-3191 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3190 Improper Encoding or Escaping of Output in nilsteampassnet/teampass

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

Froxlor vulnerable to Path Traversal

Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...

Input validation

Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20...

CVE-2023-3172

CVE-2023-3172 exposes a path traversal vulnerability in froxlor/froxlor prior to 2.0.20. The issue allows accessing files/directories outside the web root, with impact on confidentiality, integrity, and availability as described. Affected software: Froxlor versions before 2.0.20; root cause: path...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2179)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-3142

Summary of CVE-2023-3142 Vulnerability: Cross-site Scripting (XSS) stored in microweber/microweber prior to 2.0, including 1.3.4 and earlier. What’s affected: Microweber web application; the issue is triggered by stored input that is later displayed (notably on the Editing page). Root cause: Stor...

CVE-2023-3109

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3109 Cross-site Scripting (XSS) - Stored in admidio/admidio

Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...

CVE-2023-3095

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3095 Improper Access Control in nilsteampassnet/teampass

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3095 Improper Access Control in nilsteampassnet/teampass

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...