Cross site scripting

Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting XSS vulnerability has been identified within the Quarantine UI of the system. This vulnerability poses a significant threat to administrators who utilize the Quarantine feature. An attacker can sen...

[SECURITY] Fedora 38 Update: chromium-119.0.6045.199-1.fc38

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 39 Update: chromium-119.0.6045.199-1.fc39

Chromium is an open-source web browser, powered by WebKit Blink...

Voovi SQL Injection Vulnerability

Voovi is an open source social networking script from Sourceforge. Voovi 1.0 version has a SQL injection vulnerability , the vulnerability stems from signin.php has a SQL injection vulnerability...

Mattermost Denial of Service Vulnerability (CNVD-2023-9448609)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial of service vulnerability that stems from an inability to limit the amount of data extracted from a compressed archive during an import in Mattermost Boards, which can b...

Voovi SQL Injection Vulnerability

Voovi is an open source social networking script from Sourceforge. Voovi 1.0 version has a SQL injection vulnerability , the vulnerability stems from editprofile.php has a SQL injection vulnerability...

Voovi SQL Injection Vulnerability

Voovi is an open source social networking script from Sourceforge. Voovi version 1.0 suffers from a SQL injection vulnerability, which stems from a SQL injection vulnerability in videos.php...

Mattermost Open Redirect Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an open redirect vulnerability that occurs when a user clicks "Back to Mattermost" after providing an invalid custom URL scheme in /oauth/service/mobilelogin?redirectto=, which...

Voovi Security Breach

Voovi is an open source social networking script from Sourceforge. A security vulnerability exists in Voovi version 1.0, which stems from an SQL injection vulnerability in photos.php...

Voovi SQL Injection Vulnerability

Voovi is an open source social networking script from Sourceforge. Voovi 1.0 version has a SQL injection vulnerability , the vulnerability stems from signup2.php SQL injection vulnerability...

CVE-2023-48950

An issue in the boxcollen function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

DEBIAN-CVE-2023-48950

An issue in the boxcollen function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-48949

An issue in the boxadd function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-48945

A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-48948

An issue in the boxdiv function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

DEBIAN-CVE-2023-48946

An issue in the boxmpy function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

UBUNTU-CVE-2023-48947

An issue in the chacmp function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

UBUNTU-CVE-2023-48950

An issue in the boxcollen function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

UBUNTU-CVE-2023-48952

An issue in the boxdeserializereusing function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

Design/Logic Flaw

Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary users to impersonate any remote user. This issue has been patched in version 2023.11.1-beta.1...