6602 matches found
CVE-2023-0995
CVE-2023-0995 is a stored XSS in unilogies/bumsys prior to v2.0.1. Affected component(s): the web app handling user input stored and later displayed. Exploitability is evidenced by a PoC showing a payload in a POST to customer-support flow, triggering test. Remediation: upgrade to version 2.0.1 o...
CVE-2023-0994 Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2...
From Spring Native to Spring Boot 3
Today, we are finishing to transition the Spring support for building native executables from the experimental Spring Native project to the official Spring Boot GraalVM native image support. In practice, that means we are archiving the Spring Native GitHub repository and moving it to the...
GHSA-MGMM-CMHJ-2H5F modoboa Cross-site Scripting vulnerability
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.45...
PYSEC-2023-33
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...
CVE-2023-0947
CVE-2023-0947 : Path Traversal vulnerability in FlatPress (flatpressblog/flatpress) prior to version 1.3. The issue allows unauthenticated attackers to traverse directories and access sensitive files in the FP-content area due to improper path validation. Affected: FlatPress prior to 1.3. Impact ...
CVE-2023-0947 Path Traversal in flatpressblog/flatpress
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-0947 Path Traversal in flatpressblog/flatpress
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-0949 Cross-site Scripting (XSS) - Reflected in modoboa/modoboa
Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...
K08827426: Vim vulnerability CVE-2022-0359
Security Advisory Description Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0359 Impact This vulnerability allows an attacker to input a specially crafted file, leading to arbitrary execution of code or potentially causing services to stop responding. Security...
K22494544: SNMP Incorrect Access Control vulnerability CVE-2017-5135
Security Advisory Description Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor formerly Cisco DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from th...
CVE-2023-0934
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...
CVE-2023-0914
Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...
Authorization
Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4...
CVE-2023-0914
CVE-2023-0914 affects pixelfed/pixelfed versions prior to 0.11.4 due to improper authorization. Root cause is weak access control that could allow unauthorized access to content. Reported across multiple feeds (NVD/Red Hat/OSV/GHSA) with remediation guidance: update to 0.11.4 or later to resolve....