6602 matches found
CVE-2023-3026
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
CVE-2023-3026 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 21.2.8...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
nilsteampassnet/teampass vulnerable to cross-site scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. This enables an attacker to inject malicious code into a shared folder, which can then be executed by other users who have access to the folder...
Null pointer dereference
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-2999
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...
CVE-2023-3012 NULL Pointer Dereference in gpac/gpac
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free
Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
CVE-2023-3013 Unchecked Return Value in gpac/gpac
Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3013
Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3009
CVE-2023-3009 describes a stored XSS vulnerability in the TeamPass project nilsteampassnet/teampass, present in versions before 3.0.9. The issue allows injecting JavaScript via an item name stored in a shared folder, triggering code execution for other users with folder access. Connected sources ...
CVE-2023-2998
The CVE-2023-2998 entry concerns a Stored XSS in thorsten/phpMyFAQ before version 3.1.14. According to the documents, when admins create a FAQ News item, user-supplied content in the “text of the record” can inject scripts, leading to cross-site script execution. Affected component: phpMyFAQ’s ba...
CVE-2023-3013
Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...
CVE-2023-3009 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...
CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free
Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
