6574 matches found
Path traversal
Relative Path Traversal in GitHub repository dnnsoftware/dnn.platform prior to 9.11.0...
Design/Logic Flaw
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...
CVE-2022-3364 No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...
CVE-2022-3352
Use After Free in GitHub repository vim/vim prior to 9.0.0614...
CVE-2022-3352
Use After Free in GitHub repository vim/vim prior to 9.0.0614...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.8.3...
CVE-2022-3355 Cross-site Scripting (XSS) - Stored in inventree/inventree
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.8.3...
CVE-2022-3355
CVE-2022-3355 is a stored XSS vulnerability in Inventree (inventree/inventree) prior to version 0.8.3. The issue arises from uploading SVG files, allowing a attacker to inject scripts that are stored and executed when the uploaded file is accessed. A patch exists in version 0.8.3 and later; a tem...
CVE-2022-1725
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959...
CVE-2022-1718
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
Cross site request forgery (csrf)
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
CVE-2022-1725
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959...
Null pointer dereference
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959...
Default credentials
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9...
CVE-2022-3352 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0614...
CVE-2022-3352
Use After Free in GitHub repository vim/vim prior to 9.0.0614...
CVE-2022-3352
Use After Free in GitHub repository vim/vim prior to 9.0.0614...
CVE-2022-3352 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0614...
CVE-2022-3326 Weak Password Requirements in ikus060/rdiffweb
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9...
CVE-2022-3326 Weak Password Requirements in ikus060/rdiffweb
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9...