6602 matches found
CVE-2023-4652 Cross-site Scripting (XSS) - Stored in instantsoft/icms2
Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
FreeBSD : py-httpie -- exposure of sensitive information vulnerabilities (1e37fa3e-5988-4991-808f-eae98047e2af)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1e37fa3e-5988-4991-808f-eae98047e2af advisory. - Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpi...
CVE-2023-4624
Server-Side Request Forgery SSRF in GitHub repository bookstackapp/bookstack prior to v23.08...
SUSE SLES12 Security Update : vim (SUSE-SU-2023:3463-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3463-1 advisory. Updated to version 9.0 with patch level 1572. - CVE-2023-2426: Fixed Out-of-range Pointer Offset use bsc1210996. - CVE-2023-2609:...
CVE-2023-4561
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.4...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.4...
CVE-2023-4560 Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s
Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...
CVE-2023-4561 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.4...
CVE-2023-4455 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.6.3...
CVE-2023-4453 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8...
CVE-2023-4451 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4451 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
Cross-site Scripting XSS - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4434
Missing Authorization in GitHub repository hamza417/inure prior to build88...
Input validation
Improper Input Validation in GitHub repository hamza417/inure prior to build88...
CVE-2023-4435 Improper Input Validation in hamza417/inure
Improper Input Validation in GitHub repository hamza417/inure prior to build88...
CVE-2023-4435 Improper Input Validation in hamza417/inure
Improper Input Validation in GitHub repository hamza417/inure prior to build88...
CVE-2023-4435 Improper Input Validation in hamza417/inure
Improper Input Validation in GitHub repository hamza417/inure prior to build88...
CVE-2023-4434 Missing Authorization in hamza417/inure
Missing Authorization in GitHub repository hamza417/inure prior to build88...
CVE-2023-4434
CVE-2023-4434 refers to a missing authorization vulnerability in the Inure Android app (GitHub hamza417/inure) present in builds prior to build88. Red Hat and OSV/NVD entries corroborate the issue as ‘Missing Authorization in hamza417/inure prior to build88’. Technical detail from the Huntr entry...