6602 matches found
GHSA-J93V-CX26-2XC4 Duplicate Advisory: Cross-site Scripting (XSS) in Predefined Properties delete
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q7cc-m6jw-m262. This link is maintained to preserve external references. Original DescriptionCross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21...
GHSA-6GP6-XJ27-G89Q Duplicate Advisory: Cross-site Scripting (XSS) in name field of Custom Reports
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m6m9-gr85-79vm. This link is maintained to preserve external references. Original Description Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-2614 Cross-site Scripting (XSS) - DOM in pimcore/pimcore
Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-2616 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-2630
The CVE-2023-2630 entry concerns Pimcore (pimcore/pimcore) with a stored Cross-site Scripting (XSS) vulnerability in versions prior to 10.5.21. The identified issue enables injection of JavaScript in contexts where user-supplied data is stored and later rendered by the application, leading to pot...
CVE-2023-2630 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-2610
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532...
Integer overflow
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532...
CVE-2023-2591
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
CVE-2023-2610 Integer Overflow or Wraparound in vim/vim
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532...
CVE-2023-2590 Missing Authorization in answerdev/answer
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9...
CVE-2023-2590 Missing Authorization in answerdev/answer
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1815)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size in GitHub repositor...
CVE-2023-2610
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532...
CVE-2023-2609
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531...
CVE-2023-2609 NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2583 Code Injection in jsreport/jsreport
Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3...
CVE-2023-2564
CVE-2023-2564 describes an OS Command Injection in sbs20/scanservjs before v2.27.0. The vulnerability arises in the server’s REST APIs for scanning and preview, where arrays of strings in POST bodies are interpolated into shell commands (via Process.spawn/scanimage), allowing an attacker to injec...