6602 matches found
CVE-2023-1127
Divide By Zero in GitHub repository vim/vim prior to 9.0.1367...
CVE-2023-1104 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1115
CVE-2023-1115 describes a stored XSS in pimcore/pimcore before version 10.5.18. The issue arises because input in the Link.php attributes of the Document Page Link Editable is not adequately sanitized/escaped, allowing an attacker to inject JavaScript that executes in a user’s browser when the pa...
CVE-2023-1116 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...
CVE-2023-1115 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...
Microweber Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber 1.3.2 and prior. A patch is available and anticipated to be part of version 1.3.3...
CVE-2023-1081 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...
CVE-2023-1067
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...
CVE-2023-1070
CVE-2023-1070 affects TeamPass (nilsteampassnet/teampass) prior to version 3.0.0.22. The issue is described as External Control of File Name or Path, enabling an attacker to delete arbitrary files through manipulation of file names/paths. The root cause is a vulnerability in how file names/paths ...
CVE-2023-1067 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.18...
CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
CVE-2023-1034
Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...
Path traversal
Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...
CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm
Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...
CVE-2023-1033
CVE-2023-1033 describes a Cross-Site Request Forgery (CSRF) vulnerability in froxlor/froxlor prior to version 2.0.11. The affected software is Froxlor (web-based server management) with the issue in its handling of authenticated requests. The practical impact cited in connected documents is that ...
CVE-2023-0995
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to v2.0.1...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to v2.0.1...