6714 matches found
CVE-2022-3005: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-3235
Use After Free in GitHub repository vim/vim prior to 9.0.0490...
CVE-2022-3235
Use After Free in GitHub repository vim/vim prior to 9.0.0490...
CVE-2022-3235
Use After Free in GitHub repository vim/vim prior to 9.0.0490...
CVE-2022-3235 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0490...
CVE-2022-3234
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483...
CVE-2022-3232
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.5...
PYSEC-2022-281
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.5...
PYSEC-2022-281
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.5...
CVE-2022-3232 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.5...
CVE-2022-3231
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...
CVE-2022-3231
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.9.0...
Authentication flaw
Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10...
CVE-2022-3234
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483...
CVE-2022-3234
CVE-2022-3234 : The Vim/vim project contains a heap-based buffer overflow in the code paths handling inputs for certain files, affected in Vim versions prior to 9.0.0483. The connected sources confirm this as a Vim vulnerability with the described heap overflow, but they do not provide specific e...
GHSA-JF8P-3VJH-PQ94 Harbor fails to validate the user permissions when viewing Webhook policies
Impact Harbor fails to validate the user permissions to view Webhook policies including relevant credentials configured in different projects the user doesn’t have access to, resulting in malicious users being able to read Webhook policies of other users/projects. API call is GET...
CVE-2022-3225
Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...
Improper access control
Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...