6764 matches found
CVE-2023-2998
The CVE-2023-2998 entry concerns a Stored XSS in thorsten/phpMyFAQ before version 3.1.14. According to the documents, when admins create a FAQ News item, user-supplied content in the “text of the record” can inject scripts, leading to cross-site script execution. Affected component: phpMyFAQ’s ba...
CVE-2023-3013
Removed by vendor...
CVE-2023-3012 NULL Pointer Dereference in gpac/gpac
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3013
Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3013 Unchecked Return Value in gpac/gpac
Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...
SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2023:2320-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2320-1 advisory. Updated to version 3.6.14: - CVE-2023-2855: Fixed a crash in the Candump log file parser...
CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...
CVE-2023-2984
Path Traversal: '..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22...
Path traversal
Path Traversal: '..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22...
Privilege escalation
Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...
antfu/utils vulnerable to prototype pollution
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2972
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
Code injection
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2972 Prototype Pollution in antfu/utils
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2983 Privilege Defined With Unsafe Actions in pimcore/pimcore
Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23...
CVE-2023-2954
Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...
CVE-2023-2954
CVE-2023-2954 is a stored XSS in the DjangoBlog project liangliangyy/djangoblog prior to master. Connected sources confirm the vulnerability arises from handling Markdown comments, enabling script execution when users view or interact with comments. PoCs and documented payloads exist (Huntr, etc....
CVE-2023-2954
Cross-site Scripting XSS - Stored in GitHub repository liangliangyy/djangoblog prior to master...