6603 matches found
GHSA-RVJP-8QJ4-8P29 Answer has Observable Timing Discrepancy
Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...
GHSA-XVFJ-84VC-HRMF Answer vulnerable to Stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
Answer vulnerable to Authentication Bypass by Capture-replay
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6...
Answer vulnerable to Stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
GHSA-79HX-G43V-XFMR Answer vulnerable to Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1537
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1540
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1535
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
Buffer overflow
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...
Session fixation
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
Buffer overflow
Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...
Code injection
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
Code injection
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1527
Cross-site Scripting XSS - Generic in GitHub repository tsolucio/corebos prior to 8.0...
CVE-2023-1536 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.7...
CVE-2023-1540 Observable Response Discrepancy in answerdev/answer
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1545 SQL Injection in nilsteampassnet/teampass
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
CVE-2023-1543 Insufficient Session Expiration in answerdev/answer
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1540
CVE-2023-1540 concerns the open‑source knowledgebase app answerdev/answer prior to version 1.0.6. The vulnerability is described as an observable response discrepancy in the GitHub repository’s Answer before 1.0.6, enabling information disclosure during the password reset flow: an attacker could ...