Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2451)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2022-2594)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-2483)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

GHSA-PJ2C-H76W-VV6F tiny-csrf has openly visible CSRF tokens

Impact Weak encryption on CSRF so tokens can be read by malicious attackers. Patches Problems have been patched as of v1.1.0 Workarounds Upgrade to v1.1.0 References https://cheatsheetseries.owasp.org/cheatsheets/Cross-SiteRequestForgeryPreventionCheatSheet.html For more information Submit an iss...

tiny-csrf has openly visible CSRF tokens

Impact Weak encryption on CSRF so tokens can be read by malicious attackers. Patches Problems have been patched as of v1.1.0 Workarounds Upgrade to v1.1.0 References https://cheatsheetseries.owasp.org/cheatsheets/Cross-SiteRequestForgeryPreventionCheatSheet.html For more information Submit an iss...

Design/Logic Flaw

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0...

CVE-2022-3423 Allocation of Resources Without Limits or Throttling in nocodb/nocodb

Allocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0...

CVE-2022-3423

CVE-2022-3423 affects NocoDB prior to version 0.92.0. The issue is a resource management flaw described as Allocation of Resources Without Limits or Throttling, allowing a crafted HTTP request to insert large characters into the input field for creating a new project, which can trigger a Denial o...

Default credentials

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

Path traversal

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...

PYSEC-2022-43157

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

PYSEC-2022-43156

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

CVE-2022-3273 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

CVE-2022-3002

CVE-2022-3002 is a stored XSS vulnerability in YetiForceCRM (yetiforcecrm) prior to version 6.4.0. Multiple sources confirm the issue stems from insufficient input filtering/escaping, enabling attacker-controlled data to be stored and later rendered insecurely. The affected software is YetiForceC...

CVE-2022-3389

The CVE-2022-3389 entry concerns the Rdiffweb project (ikus060/rdiffweb). Affected version: prior to 2.4.10, with a Path Traversal vulnerability in the file/path handling. The issue is documented as a vulnerability in path traversal (no exploitation details provided in the connected sources). Mit...

CVE-2022-3389 Path Traversal in ikus060/rdiffweb

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...

CVE-2022-3389 Path Traversal in ikus060/rdiffweb

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...

parse-url: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url

A flaw was found in the parse-url package. Affected versions of this package are vulnerable to information exposure due to an improper validation issue...

Design/Logic Flaw

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

CVE-2022-2922

Relative Path Traversal in GitHub repository dnnsoftware/dnn.platform prior to 9.11.0...