https://vulnogram.org/ Most recent CVEs assigned by @huntrdev (@huntrdev). https://vulnogram.org/seaview/icons/@huntrdev.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2023-5948 https://vulnogram.org/CVE-2023-5948 Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91. High Fri, 03 Nov 2023 06:40:02 GMT https://vulnogram.org/CVE-2023-5904 https://vulnogram.org/CVE-2023-5904 Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:01:44 GMT https://vulnogram.org/CVE-2023-5903 https://vulnogram.org/CVE-2023-5903 Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:00:42 GMT https://vulnogram.org/CVE-2023-5900 https://vulnogram.org/CVE-2023-5900 Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:00:42 GMT https://vulnogram.org/CVE-2023-5901 https://vulnogram.org/CVE-2023-5901 Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:00:42 GMT https://vulnogram.org/CVE-2023-5897 https://vulnogram.org/CVE-2023-5897 Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1. Medium Wed, 01 Nov 2023 00:00:41 GMT https://vulnogram.org/CVE-2023-5898 https://vulnogram.org/CVE-2023-5898 Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:00:41 GMT https://vulnogram.org/CVE-2023-5902 https://vulnogram.org/CVE-2023-5902 Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Medium Network Exploitable Wed, 01 Nov 2023 00:00:41 GMT https://vulnogram.org/CVE-2023-5896 https://vulnogram.org/CVE-2023-5896 Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4. Low Wed, 01 Nov 2023 00:00:41 GMT https://vulnogram.org/CVE-2023-5899 https://vulnogram.org/CVE-2023-5899 Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:00:41 GMT https://vulnogram.org/CVE-2023-5895 https://vulnogram.org/CVE-2023-5895 Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:00:19 GMT https://vulnogram.org/CVE-2023-5894 https://vulnogram.org/CVE-2023-5894 Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:00:18 GMT https://vulnogram.org/CVE-2023-5889 https://vulnogram.org/CVE-2023-5889 Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Medium Wed, 01 Nov 2023 00:00:18 GMT https://vulnogram.org/CVE-2023-5891 https://vulnogram.org/CVE-2023-5891 Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Medium Wed, 01 Nov 2023 00:00:18 GMT https://vulnogram.org/CVE-2023-5892 https://vulnogram.org/CVE-2023-5892 Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Medium Wed, 01 Nov 2023 00:00:18 GMT https://vulnogram.org/CVE-2023-5893 https://vulnogram.org/CVE-2023-5893 Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Low Wed, 01 Nov 2023 00:00:18 GMT https://vulnogram.org/CVE-2023-5890 https://vulnogram.org/CVE-2023-5890 Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. Medium Wed, 01 Nov 2023 00:00:18 GMT https://vulnogram.org/CVE-2023-5873 https://vulnogram.org/CVE-2023-5873 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0. Medium Tue, 31 Oct 2023 08:06:44 GMT https://vulnogram.org/CVE-2023-5866 https://vulnogram.org/CVE-2023-5866 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1. Medium Tue, 31 Oct 2023 00:00:42 GMT https://vulnogram.org/CVE-2023-5867 https://vulnogram.org/CVE-2023-5867 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2. Medium Tue, 31 Oct 2023 00:00:41 GMT https://vulnogram.org/CVE-2023-5865 https://vulnogram.org/CVE-2023-5865 Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2. High Tue, 31 Oct 2023 00:00:40 GMT https://vulnogram.org/CVE-2023-5864 https://vulnogram.org/CVE-2023-5864 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1. High Tue, 31 Oct 2023 00:00:19 GMT https://vulnogram.org/CVE-2023-5863 https://vulnogram.org/CVE-2023-5863 Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2. High Tue, 31 Oct 2023 00:00:19 GMT https://vulnogram.org/CVE-2023-5861 https://vulnogram.org/CVE-2023-5861 Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. Medium Network Exploitable Tue, 31 Oct 2023 00:00:18 GMT https://vulnogram.org/CVE-2023-5862 https://vulnogram.org/CVE-2023-5862 Missing Authorization in GitHub repository hamza417/inure prior to Build95. Medium Tue, 31 Oct 2023 00:00:18 GMT https://vulnogram.org/CVE-2023-5833 https://vulnogram.org/CVE-2023-5833 Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. High Mon, 30 Oct 2023 12:24:14 GMT https://vulnogram.org/CVE-2023-5832 https://vulnogram.org/CVE-2023-5832 Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. Critical Network Exploitable Mon, 30 Oct 2023 12:24:09 GMT https://vulnogram.org/CVE-2023-5844 https://vulnogram.org/CVE-2023-5844 Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0. Medium Mon, 30 Oct 2023 10:08:49 GMT https://vulnogram.org/CVE-2023-5842 https://vulnogram.org/CVE-2023-5842 Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5. Medium Mon, 30 Oct 2023 00:00:21 GMT https://vulnogram.org/CVE-2023-5838 https://vulnogram.org/CVE-2023-5838 Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9. Medium Sun, 29 Oct 2023 00:00:20 GMT https://vulnogram.org/CVE-2023-5840 https://vulnogram.org/CVE-2023-5840 Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9. Medium Network Exploitable Sun, 29 Oct 2023 00:00:20 GMT https://vulnogram.org/CVE-2023-5839 https://vulnogram.org/CVE-2023-5839 Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9. High Sun, 29 Oct 2023 00:00:19 GMT https://vulnogram.org/CVE-2023-5690 https://vulnogram.org/CVE-2023-5690 Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2. Medium Network Exploitable Fri, 20 Oct 2023 16:22:53 GMT https://vulnogram.org/CVE-2023-5689 https://vulnogram.org/CVE-2023-5689 Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. High Fri, 20 Oct 2023 16:22:49 GMT https://vulnogram.org/CVE-2023-5688 https://vulnogram.org/CVE-2023-5688 Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2. Critical Network Exploitable Fri, 20 Oct 2023 16:22:46 GMT https://vulnogram.org/CVE-2023-5687 https://vulnogram.org/CVE-2023-5687 Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3. Medium Network Exploitable Fri, 20 Oct 2023 16:22:43 GMT https://vulnogram.org/CVE-2023-5686 https://vulnogram.org/CVE-2023-5686 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. Medium Fri, 20 Oct 2023 16:22:42 GMT https://vulnogram.org/CVE-2023-5626 https://vulnogram.org/CVE-2023-5626 Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16. Low Tue, 17 Oct 2023 23:22:41 GMT https://vulnogram.org/CVE-2023-5595 https://vulnogram.org/CVE-2023-5595 Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV. Medium Mon, 16 Oct 2023 08:25:00 GMT https://vulnogram.org/CVE-2023-5591 https://vulnogram.org/CVE-2023-5591 SQL Injection in GitHub repository librenms/librenms prior to 23.10.0. High Mon, 16 Oct 2023 00:00:19 GMT https://vulnogram.org/CVE-2023-5590 https://vulnogram.org/CVE-2023-5590 NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0. High Network Exploitable Sun, 15 Oct 2023 22:14:03 GMT https://vulnogram.org/CVE-2023-5586 https://vulnogram.org/CVE-2023-5586 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV. Medium Sun, 15 Oct 2023 00:28:09 GMT https://vulnogram.org/CVE-2023-4517 https://vulnogram.org/CVE-2023-4517 Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6. Low Fri, 13 Oct 2023 12:24:14 GMT https://vulnogram.org/CVE-2023-4829 https://vulnogram.org/CVE-2023-4829 Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22. Medium Fri, 13 Oct 2023 12:24:05 GMT https://vulnogram.org/CVE-2023-5573 https://vulnogram.org/CVE-2023-5573 Allocation of Resources Without Limits or Throttling in GitHub repository vriteio/vrite prior to 0.3.0. Medium Fri, 13 Oct 2023 09:56:18 GMT https://vulnogram.org/CVE-2023-5572 https://vulnogram.org/CVE-2023-5572 Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0. Critical Network Exploitable Fri, 13 Oct 2023 09:55:53 GMT https://vulnogram.org/CVE-2023-5571 https://vulnogram.org/CVE-2023-5571 Improper Input Validation in GitHub repository vriteio/vrite prior to 0.3.0. Medium Network Exploitable Fri, 13 Oct 2023 09:55:33 GMT https://vulnogram.org/CVE-2023-5564 https://vulnogram.org/CVE-2023-5564 Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.1.0-dev1. Medium Fri, 13 Oct 2023 00:00:19 GMT https://vulnogram.org/CVE-2023-5556 https://vulnogram.org/CVE-2023-5556 Cross-site Scripting (XSS) - Reflected in GitHub repository structurizr/onpremises prior to 3194. Medium Network Exploitable Thu, 12 Oct 2023 10:32:21 GMT https://vulnogram.org/CVE-2023-5555 https://vulnogram.org/CVE-2023-5555 Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4. High Thu, 12 Oct 2023 10:32:05 GMT