278147 matches found
CVE-2022-0735
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure...
CVE-2022-0366
An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console between versions 4.6.0 and 4.9.1...
CVE-2022-0964
Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4...
CVE-2022-0821
Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...
CVE-2022-0272
Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0...
CVE-2022-0379
Cross-site Scripting XSS - Stored in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0083
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...
CVE-2022-0542
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2022-0080
mruby is vulnerable to Heap-based Buffer Overflow...
CVE-2022-0224
dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
CVE-2022-0602
Cross-site Scripting XSS - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0...
CVE-2022-0251
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.2.10...
CVE-2022-0999
An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and prior...
CVE-2022-0754
SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5...
CVE-2022-0835
AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user...
CVE-2022-0970
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2022-0871
Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...
CVE-2022-0848
OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11...