6676 matches found
CVE-2022-1213
SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...
CVE-2022-1212
Use-After-Free in strescape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...
CVE-2022-1212 Use-After-Free in str_escape in mruby/mruby in mruby/mruby
Use-After-Free in strescape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...
CVE-2022-1213 SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat
SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...
Use-After-Free in str_escape in mruby/mruby in mruby/mruby
Use-After-Free in strescape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited...
Design/Logic Flaw
URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11...
CVE-2022-1233
CVE-2022-1233 affects the medialize/uri.js library. When parsing URLs without a scheme and with excessive slashes, the library may treat the hostname as null and set the path to /www.example.com, leading to URL confusion. This issue is fixed in version 1.19.11; prior releases are vulnerable. Affe...
CVE-2022-1233 URL Confusion When Scheme Not Supplied in medialize/uri.js
URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11...
CVE-2022-24813
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymous comments can be made using Special:RequestWikiQueue when sent directly via POST. A patch for this issue is available in the master branch of CreateWiki's GitHub repository...
CVE-2022-24813 Authentication Bypass Using an Alternate Path or Channel in CreateWiki
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymous comments can be made using Special:RequestWikiQueue when sent directly via POST. A patch for this issue is available in the master branch of CreateWiki's GitHub repository...
CVE-2021-44138
creationtimestamp| type| source ---|---|--- 2022-04-04 16:27:40+00:00| seen| https://t.me/cibsecurity/40096 2023-06-09 02:03:36+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-44138.yaml...
CVE-2022-1223
Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...
CVE-2022-1224
Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...
CVE-2022-1225
Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6...
Authorization
Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...
Privilege escalation
Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6...
CVE-2022-1224 Improper Authorization in phpipam/phpipam
Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...
CVE-2022-1224 Improper Authorization in phpipam/phpipam
Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6...