6602 matches found
CVE-2023-6293
CVE-2023-6293 affects the sequelize-typescript project owned by robinbuschmann. The issue is a Prototype Pollution vulnerability in the repository prior to version 2.1.6, arising from unsafe handling in object property assignment (deepAssign as cited by Veracode) that can allow modification of th...
CVE-2023-6293 Prototype Pollution in robinbuschmann/sequelize-typescript
Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6...
Shuttle Booking Software 2.0 Cross Site Scripting Vulnerability
Exploit Title: Shuttle Booking Software v2.0 - Multiple Stored Cross-Site Scripting Authenticated Exploit Author: BugsBD Security Researcher Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/shuttle-booking-software/ Software Link: https://www.phpjabbers.com/shuttle-booking-software/...
SUSE CVE-2022-4806
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
VulnCheck KEV: CVE-2022-0482
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3...
CVE-2023-6022 Cross-Site Request Forgery (CSRF) in prefecthq/prefect
Cross-Site Request Forgery CSRF in GitHub repository prefecthq/prefect prior to 2.16.5...
CVE-2023-6131
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6131
Summary: CVE-2023-6131 is a code injection vulnerability in SuiteCRM (SalesAgility) affecting versions prior to 7.14.2, 7.12.14, and 8.4.2. Affected software: SuiteCRM (SalesAgility). Root cause / vulnerability type: Code injection in the GitHub repository path for SuiteCRM. Impact (as stated): N...
CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm
Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6130
CVE-2023-6130 is a path traversal vulnerability in SuiteCRM. The issue arises from inadequate filtering of path components ('..\filename') in the GitHub repository, allowing potentially arbitrary file retrieval from the underlying filesystem. Affected versions are SuiteCRM prior to 7.14.2, 7.12.1...
CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm
Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6128
Cross-site Scripting XSS - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6128 Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm
Cross-site Scripting XSS - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6127 Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm
Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6126
CVE-2023-6126 refers to a Code Injection in the GitHub repository salesagility/suitecrm for versions prior to 7.14.2, 7.12.14, and 8.4.2. The connected records consistently describe a code injection vulnerability affecting SuiteCRM; some sources also discuss HTML injection in SuiteCRM, but the CV...
CVE-2023-6126 Code Injection in salesagility/suitecrm
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
CVE-2023-6126 Code Injection in salesagility/suitecrm
Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...
