Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

Admidio vulnerable to Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10...

CVE-2023-3692

Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10...

CVE-2023-3692 Unrestricted Upload of File with Dangerous Type in admidio/admidio

Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10...

Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10...

Sql injection

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24...

CVE-2023-3672 Cross-site Scripting (XSS) - DOM in plaidweb/webmention.js

Cross-site Scripting XSS - DOM in GitHub repository plaidweb/webmention.js prior to 0.5.5...

CVE-2023-3668 Improper Encoding or Escaping of Output in froxlor/froxlor

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21...

PT-2023-25676 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.21 Description: The issue is related to improper encoding or escaping of output in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.21, update to version 2.0.21 or later to resolv...

Cross-Site Scripting (XSS)

github.com/mlogclub/bbs-go is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript on victim's browser via a crafted payload to the comment...

CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core

Cross-Site Request Forgery CSRF in GitHub repository salesagility/suitecrm-core prior to 8.3.1...

CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core

Cross-Site Request Forgery CSRF in GitHub repository salesagility/suitecrm-core prior to 8.3.1...

CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core

Cross-Site Request Forgery CSRF in GitHub repository salesagility/suitecrm-core prior to 8.3.1...

tarteaucitron.js vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1...

GHSA-F44M-65H3-99VC tarteaucitron.js vulnerable to Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1...

CVE-2023-3620 Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js

Cross-site Scripting XSS - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1...

CVE-2023-3620 Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js

Cross-site Scripting XSS - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1...

RUSTSEC-2023-0089 atomic-polyfill is unmaintained

The author has archived the GitHub repository and mentions deprecation in project's README. Possible alternatives portable-atomic...

TeamPass Cross-site Scripting vulnerability

Cross-site Scripting XSS - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10...