6714 matches found
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...
CVE-2023-5690 Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.2.2...
CVE-2023-5689 Cross-site Scripting (XSS) - DOM in modoboa/modoboa
Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...
CVE-2023-5689 Cross-site Scripting (XSS) - DOM in modoboa/modoboa
Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...
CVE-2023-5688 Cross-site Scripting (XSS) - DOM in modoboa/modoboa
Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...
CVE-2023-5688
CVE-2023-5688 affects modoboa/modoboa prior to 2.2.2 and is described as a DOM-based Cross-site Scripting (XSS) vulnerability. The vulnerability is triggered through the browser environment, allowing an attacker to execute malicious scripts in a user’s session. Public references confirm the issue...
CVE-2023-5687 Cross-Site Request Forgery (CSRF) in mosparo/mosparo
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
CVE-2023-5687 Cross-Site Request Forgery (CSRF) in mosparo/mosparo
Cross-Site Request Forgery CSRF in GitHub repository mosparo/mosparo prior to 1.0.3...
CVE-2023-5686 Heap-based Buffer Overflow in radareorg/radare2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0...
Amazon Linux 2 : vim (ALAS-2023-2288)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2288 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that...
CVE-2023-5686
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0...
CVE-2023-5626 Cross-Site Request Forgery (CSRF) in pkp/ojs
Cross-Site Request Forgery CSRF in GitHub repository pkp/ojs prior to 3.3.0-16...
Discord: A Playground for Nation-State Hackers Targeting Critical Infrastructure
In what's the latest evolution of threat actors abusing legitimate infrastructure for nefarious ends, new findings show that nation-state hacking groups have entered the fray in leveraging the social platform for targeting critical infrastructure. Discord, in recent years, has become a lucrative...
UBUNTU-CVE-2023-5595
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...
CVE-2023-5595
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...
CVE-2023-5595 Denial of Service in gpac/gpac
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...
CVE-2023-5595 Denial of Service in gpac/gpac
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...