6714 matches found
CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...
GHSA-96GQ-6CH5-MM54 usememos/memos vulnerable to improper input validation
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
GHSA-5J6P-59CJ-J6CP usememos/memos vulnerable to privilege escalation
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2...
usememos/memos vulnerable to improper input validation
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2. As of commit c9aa2eeb9 access tokens which fail validation are rejected...
usememos/memos vulnerable to privilege escalation
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4698
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4696
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4695
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
Code injection
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-4698 Improper Input Validation in usememos/memos
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4698
CVE-2023-4698 affects usememos/memos prior to 0.13.2. The connected exploit doc describes a Local File Inclusion (LFI) via an inadequate validation of InternalPath, enabling access to server files (post-auth or remote code execution risks are implied by LFI in the blog). Public advisories consist...
CVE-2023-4698 Improper Input Validation in usememos/memos
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4695 Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-4695 Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-4696 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4695 Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
PT-2023-30363 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue concerns a floating point comparison with an incorrect operator in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3-DEV, update to version 2.3-DEV or later to...