CVE-2023-52083 Stored XSS through privileged upload of Media Manager file followed by renaming

Winter is a free, open-source content management system. Prior to 1.2.4, users with the media.managemedia permission can upload files to the Media Manager and rename them after uploading. Previously, media manager files were only sanitized on upload, not on renaming, which could have allowed a...

Sql injection

Lychee is a free photo-management tool. Prior to 5.0.2, Lychee is vulnerable to an SQL injection on any binding when using mysql/mariadb. This injection is only active for users with the .env settings set to DBLOGSQL=true and DBLOGSQLEXPLAIN=true. The defaults settings of Lychee are safe. The pat...

SUSE-SU-2023:4981-1 Security update for postfix

This update for postfix fixes the following issues: - CVE-2023-51764: Fixed new SMTP smuggling attack bsc1218304...

Dell Client BIOS Improper Authentication (DSA-2023-342)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by a improper input validation vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to corrupt memory on the system. Note that Nessus has no...

CVE-2023-52077 External apps using tokens issued by administrators and moderators can call admin APIs

Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allows external apps using tokens issued by administrators and moderators to call admin APIs. This allows malicious third-party apps to perform operations such as updating server...

WordPress Crowdsignal Dashboard – Polls, Surveys & more Plugin <= 3.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Crowdsignal Dashboard – Polls, Surveys & more Type Plugin Vulnerable versions = 3.0.11 Fixed in 3.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51488 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1b5223c0a48a Credits...

CVE-2015-10127

CVE-2015-10127 relates to the PlusCaptcha Plugin for WordPress (versions up to 2.0.6). The vulnerability is described as a cross-site scripting issue arising from manipulation of some unknown functionality, with the attack potentially launched remotely. A fix is available in version 2.0.14, and t...

SUSE CVE-2023-49792

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to versions 23.0.12.13, 24.0.12.9, 25.0.13.4, 26.0.9, and 27.1.4; when a reverse proxy is configured as truste...

OPENSUSE-SU-2023:0413-1 Security update for cppcheck

This update for cppcheck fixes the following issues: - CVE-2023-39070: Fixed heap use-after-free in removeContradiction boo1215233 - update to 2.12.1: Support importing projects with project-name - update to 2.12.0: uselessOverride finds overriding functions that either duplicate code from or...

CVE-2023-51386

CVE-2023-51386 affects Sandbox Accounts for Events. An authenticated user could read data from the events table by sending requests to the events API, exposing information such as planned events, timeframes, budgets, and owner email addresses. The issue has been patched in version 1.10.0. Affecte...

CVE-2023-51651

AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix double-dot, a URI path traversal is possible. The issue exists in the buildEndpoint method in the RestSerializer component of the AWS SDK f...

Path traversal

AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix double-dot, a URI path traversal is possible. The issue exists in the buildEndpoint method in the RestSerializer component of the AWS SDK f...

PYSEC-2023-249

Gradio is an open-source Python package that allows you to quickly build a demo or web application for your machine learning model, API, or any arbitary Python function. Versions of gradio prior to 4.11.0 contained a vulnerability in the /file route which made them susceptible to file traversal...

CVE-2023-50727

CVE-2023-50727 concerns a reflected XSS vulnerability in the Resque (Ruby) web interface. The issue arises when the /queues endpoint is appended with a crafted string (for example, current_queue path manipulation like "&gt;). Affected software is Resque prior to version 2.6.0; the vulnerability i...

CVE-2023-49791

CVE-2023-49791 affects Nextcloud Server and Nextcloud Enterprise Server where an attacker with an active session of another user could call the API to delete/modify workflows without password confirmation, bypassing the UI check. The description lists affected ranges: Nextcloud Server pre-26.0.9 ...

CVE-2023-48704 Unauthenticated heap buffer overflow in Gorrila codec decompression

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

CVE-2023-49086

Cacti (web frontend to RRDTool) versions prior to 1.2.27 are vulnerable to a DOM XSS in graphs_new.php, bypassing the fix for CVE-2023-39360. Exploitation requires an authorized user and results in execution of arbitrary JavaScript in the victim’s browser. The issue is resolved in version 1.2.27....

CVE-2023-50732

CVE-2023-50732 affects XWiki Platform: an attacker can cause Velocity code execution without script right through the document tree. Affected versions: XWiki Platform prior to 14.10.7 and prior to 15.2RC1. Root cause: Velocity script execution without required rights via document tree, enabling c...

Design/Logic Flaw

Resque pronounced like "rescue" is a Redis-backed library for creating background jobs, placing those jobs on multiple queues, and processing them later. resque-web in resque versions before 2.1.0 are vulnerable to reflected XSS through the currentqueue parameter in the path of the queues endpoin...

Authentication flaw

Navidrome is an open source web-based music collection server and streamer. A security vulnerability has been identified in navidrome's subsonic endpoint, allowing for authentication bypass. This exploit enables unauthorized access to any known account by utilizing a JSON Web Token JWT signed wit...