6602 matches found
CVE-2023-2800 Insecure Temporary File in huggingface/transformers
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1988)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
phpMyFAQ vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...
CVE-2023-2756 SQL Injection in pimcore/customer-data-framework
SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10...
CVE-2023-2756
CVE-2023-2756 is a SQL injection vulnerability in Pimcore’s customer-data-framework prior to version 3.3.10. The issue affects the Pimcore product/component and is rooted in insecure handling of SQL queries within the segment/authorization logic, allowing an administrator-like user to execute arb...
CVE-2023-2730
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...
CVE-2023-2730 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...
CVE-2023-2730 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...
Improper access control
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
Design/Logic Flaw
Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...
CVE-2023-2674 Improper Access Control in openemr/openemr
Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2674
CVE-2023-2674 describes an improper access control vulnerability in OpenEMR before version 7.0.1. Connected sources corroborate that a front-end OpenEMR user could gain authorization to perform restricted actions (e.g., adding a Pharmacy) due to weak access controls in the application’s practice/...
CVE-2023-2666 Allocation of Resources Without Limits or Throttling in froxlor/froxlor
Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16...
CVE-2023-2665 Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis
Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...
CVE-2023-2675 Improper Restriction of Excessive Authentication Attempts in linagora/twake
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223...
SUSE CVE-2023-2610
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532...
CVE-2023-2630
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.21...