6602 matches found
CVE-2023-2258 Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io
Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...
CVE-2023-2259 Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...
CVE-2023-2251 Uncaught Exception in eemeli/yaml
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...
Cross-site Scripting in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-2239
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...
Code injection
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...
Input validation
Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4...
CVE-2023-1875 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-2240
CVE-2023-2240 affects Microweber/microweber prior to version 1.3.4. The root cause is improper privilege management, leading to high-severity impact across confidentiality, integrity, and availability (per CVSS 3.1/3.0 data: HIGH). No exploit details are provided in the supplied documents. The vu...
CVE-2023-2239 Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...
CVE-2023-1875 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
Authorization
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0...
PYSEC-2023-36
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...
CVE-2023-1892
Cross-site Scripting XSS - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8...
CVE-2023-2227 Improper Authorization in modoboa/modoboa
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0...
CVE-2023-2228 Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...
CVE-2023-2228 Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.1.0...
CVE-2023-2202 Improper Access Control in francoisjacquet/rosariosis
Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3...