CVE Vulnerability

CVE-2023-0880

by

Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

CVE-2023-0879

by

Cross-site Scripting (XSS) – Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12.

CVE-2023-0878

by

Cross-site Scripting (XSS) – Generic in GitHub repository nuxt/framework prior to 3.2.1.

CVE-2023-0877

by

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.

CVE-2023-0866

by

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV.

CVE-2023-0862

by

The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103.