CVE-2023-1760 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

Threat Advisory: 3CX Softphone Supply Chain Compromise

Cisco Talos is tracking and actively responding to a supply chain attack involving the 3CX Desktop Softphone application. This is a multi-stage attack that involves sideloading DLLs, seven-day sleep routines, and additional payloads dependent on a now-removed GitHub repository for Windows-based...

GHSA-W7QG-J435-78QW Use of hard-coded, security-relevant constants in deepset-ai/haystack

Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack in version 1.15.0 and prior. A patch is available at commit 5fc84904f198de661d5b933fde756aa922bf09f1...

Use of hard-coded, security-relevant constants in deepset-ai/haystack

Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack in version 1.15.0 and prior. A patch is available at commit 5fc84904f198de661d5b933fde756aa922bf09f1...

Hardcoded credentials

Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30...

CVE-2023-1712 Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack

Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30...

CVE-2023-1712 Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack

Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30...

GHSA-3R5C-H7G6-CQW7 Duplicate Advisory: pimcore is vulnerable to cross-site scripting in classes module

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4f25-2x2c-vg6v. This link is maintained to preserve external references. Original Description Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...

Duplicate Advisory: pimcore is vulnerable to cross-site scripting in translate module

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hfmg-g39c-5444. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.20...

Duplicate Advisory: pimcore is vulnerable to cross-site scripting in classes module

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4f25-2x2c-vg6v. This link is maintained to preserve external references. Original Description Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...

GHSA-69FC-V223-6RJW Duplicate Advisory: Pimcore Cross-site scripting in Predefined Asset Metadata module in Settings

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6qjm-39vh-729w. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...

Duplicate Advisory: Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7r35-chv4-xr3r. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20...

CVE-2023-1702

Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...

CVE-2023-1704

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.20...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.20...

CVE-2023-1702 Cross-site Scripting (XSS) - Generic in pimcore/pimcore

Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...

CVE-2023-1703 Cross-site Scripting (XSS) - Generic in pimcore/pimcore

Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...

CVE-2023-1703 Cross-site Scripting (XSS) - Generic in pimcore/pimcore

Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...

CVE-2023-1701

CVE-2023-1701 concerns Pimcore PIM/Content Management: a reflected XSS in Pimcore (pimcore/pimcore) prior to version 10.5.20, specifically in the Predefined Properties module in Settings. The core issue is an unescaped/insufficiently sanitized input in the affected JavaScript/HTML handling paths ...