6603 matches found
Amazon Linux AMI : vim-common, vim-data, vim-enhanced (ALAS-2023-1681)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1681 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0882. CVE-2022-4292 Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 Tenable has extracted the preceding...
CVE-2023-0678
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...
Authorization
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...
froxlor is vulnerable to privilege escalation from customer to root via directory-options
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
Code injection
Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10...
CVE-2023-0678
PHPIPAM
CVE-2023-0677 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1...
CVE-2023-0678 Missing Authorization in phpipam/phpipam
Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1...
CVE-2023-0676 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1...
Input validation
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex
Cross-Site Request Forgery CSRF in GitHub repository squidex/squidex prior to 7.4.0...
CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
GHSA-Q9P5-W2V9-6WXF Apache InLong contains Out-of-bounds Read vulnerability
Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 to solve it...
CVE-2023-0609
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...
CVE-2023-0610
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...
Authorization
Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3...
CVE-2023-0607
Cross-site Scripting XSS - Stored in GitHub repository projectsend/projectsend prior to r1606...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository projectsend/projectsend prior to r1606...