Archive

10 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /10 July 2023 →

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

High 7.5

CVE-2023-26132

dottie vulnerable to Prototype Pollution

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable in the /dottie.js file.

dottie node-dottie node-dottie Debian Ubuntu npm

Jun 10, 2023
High 8.3

CVE-2023-3188 Scanner template

Server-Side Request Forgery (SSRF) in owncast/owncast

Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0.

owncast owncast/owncast

Jun 10, 2023
High 8.1

CVE-2023-3191

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist

Jun 10, 2023
Low 3.5

CVE-2023-3190

Improper Encoding or Escaping of Output in nilsteampassnet/teampass

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist

Jun 10, 2023