Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14...

CVE-2023-48094

A cross-site scripting XSS vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of the victim's browser via sending a crafted payload to /containerfiles/publichtml/doc/index.html. NOTE: the vendor’s position is that Apps/Sandcastle/standalone.html is part of...

Input validation

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor

Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-3233)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-5998 Out-of-bounds Read in gpac/gpac

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-5998 Out-of-bounds Read in gpac/gpac

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-5976

Improper Access Control in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-5904

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

Cross site scripting

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

Input validation

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223...

CVE-2023-5976 Improper Access Control in microweber/microweber

Improper Access Control in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-5976

The CVE-2023-5976 entry concerns Microweber (microweber/microweber) prior to version 2.0.0 with an improper access control flaw. Multiple connected sources identify the root cause as insufficient restrictions that allow unauthorized actions (e.g., commenting on unpublished blog content). Context ...

CVE-2023-5976 Improper Access Control in microweber/microweber

Improper Access Control in GitHub repository microweber/microweber prior to 2.0...

Rocky Linux 8 : .NET Core 3.1 (RLSA-2022:6057)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6057 advisory. - Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2. CVE-2022-1650 - .NE...

Fedora 39 : vim (2023-1c2c29a683)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1c2c29a683 advisory. - patchlevel 1872 ---- The newest upstream commit Security fixes for CVE-2023-4733, CVE-2023-4752, CVE-2023-4750 Tenable has extracted the preceding...

Rocky Linux 8 : vim (RLSA-2022:1552)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1552 advisory. - Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646. CVE-2022-1154 Note that Nessus has not tested for this issue but has instead reli...