6602 matches found
CVE-2023-3083 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3086 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3073
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3069
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3070
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...
Default credentials
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8...
Stripe: The `stripe/veneur` GitHub repository links to a domain `veneur.org`, which is not under stripe's control
The stripe/veneur GitHub repository contained a link to an external domain, veneur.org, which was not under Stripe's control. This posed a security risk as the domain could be exploited for phishing or supply chain contamination attacks. The link has since been removed from the repository, but ma...
CVE-2023-3067
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
CVE-2023-3070 Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...
CVE-2023-3069
The CVE-2023-3069 entry concerns coreBOS (tsolucio/corebos) up to version 8, affected by an unverified password change vulnerability in the account password change feature. The underlying issue is bypass of password length and complexity validation, enabling an attacker to change a password witho...
CVE-2023-3067
CVE-2023-3067 is a stored XSS vulnerability affecting Trilium Notes (zadam/trilium) in versions prior to 0.59.4. The issue arises from a stored XSS condition when a user creates a note and its name (title) is rendered in the UI (Note Map functionality), allowing scripts to be stored and later exe...
CVE-2023-3074 Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...
PT-2023-22888 · Tsolucio · Tsolucio/Corebos
Name of the Vulnerable Software and Affected Versions: tsolucio/corebos versions prior to 8 Description: The issue concerns an unverified password change in the GitHub repository tsolucio/corebos. Recommendations: For versions prior to 8, update to version 8 or later to resolve the issue...
CVE-2023-3073 Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
CVE-2023-3073 Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc...
CVE-2023-3070 Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Cross-site Scripting XSS - Stored in GitHub repository tsolucio/corebos prior to 8...