CVE-2023-5351

CVE-2023-5351 is a stored Cross-site Scripting (XSS) vulnerability affecting SuiteCRM versions prior to 7.14.1. The issue arises from storing user input and displaying it without proper validation. Public sources in connected docs confirm affected software (SuiteCRM) and versions (

CVE-2023-5351 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5351 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1...

CVE-2023-5350

CVE-2023-5350 corresponds to a SQL injection in the SuiteCRM project by SalesAgility, arising from improper validation/cleaning of the duplicate_parent_id field. Affected software: SuiteCRM versions prior to 7.14.1. The vulnerability can allow an attacker to execute SQL commands on the database, ...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

GHSA-39M3-CJ8C-886R Dolibarr Cross-site Scripting vulnerability

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.0...

CVE-2023-5323

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0...

Authorization

Missing Authorization in GitHub repository hamza417/inure prior to build94...

CVE-2023-5321 Missing Authorization in hamza417/inure

Missing Authorization in GitHub repository hamza417/inure prior to build94...

CVE-2023-5321 Missing Authorization in hamza417/inure

Missing Authorization in GitHub repository hamza417/inure prior to build94...

GHSA-J5WW-5XF4-HQM2 phpMyFAQ Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

GHSA-5JWV-M8H3-69CG phpMyFaq Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

Hardcoded credentials

Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-5320 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5317 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5316 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5318

CVE-2023-5318 affects microweber/microweber prior to version 2.0, where hard-coded credentials are used in the repository. The issue originates from hard-coded credentials and is addressed by upgrading to version 2.0 or later (a patch is available/anticipated in 2.0). Impact details are stated in...