6602 matches found
Duplicate Advisory: Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7r35-chv4-xr3r. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20...
GHSA-69FC-V223-6RJW Duplicate Advisory: Pimcore Cross-site scripting in Predefined Asset Metadata module in Settings
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6qjm-39vh-729w. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
CVE-2023-1702
Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
CVE-2023-1704
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.20...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.20...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20...
CVE-2023-1702 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
CVE-2023-1703 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
CVE-2023-1701
CVE-2023-1701 concerns Pimcore PIM/Content Management: a reflected XSS in Pimcore (pimcore/pimcore) prior to version 10.5.20, specifically in the Predefined Properties module in Settings. The core issue is an unescaped/insufficiently sanitized input in the affected JavaScript/HTML handling paths ...
CVE-2023-1703 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...
CBL Mariner 2.0 Security Update: vim (CVE-2022-3153)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3153 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. CVE-2022-3153 Note that Nessus has not...
CBL Mariner 2.0 Security Update: vim (CVE-2022-1674)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1674 advisory. - NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 in GitHub repository vim/vim prior to...
CBL Mariner 2.0 Security Update: vim (CVE-2022-3234)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3234 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. CVE-2022-3234 Note that Nessus has no...
CBL Mariner 2.0 Security Update: vim (CVE-2022-1620)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1620 advisory. - NULL Pointer Dereference in function vimregexecstring at regexp.c:2729 in GitHub repository vim/vim prior to...
CBL Mariner 2.0 Security Update: vim (CVE-2022-1629)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1629 advisory. - Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities...
CVE-2023-1665
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...
CVE-2023-26493
Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the web-interface-check.yml was subject to command injection. The web-interface-check.yml was triggered when a pull request was opened or updated and...
Input validation
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...
CVE-2023-26493 Command Injection in Cocos Engine workflow
Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the web-interface-check.yml was subject to command injection. The web-interface-check.yml was triggered when a pull request was opened or updated and...