CVE-2022-2829

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

CVE-2022-2829 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

CVE-2022-2829 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

Cross site scripting in yetiforce/yetiforce-crm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

Cross site scripting in mobiledoc-kit

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

GHSA-JHXH-68JJ-68C7 Cross site scripting in yetiforce/yetiforce-crm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

CVE-2022-2946

Use After Free in GitHub repository vim/vim prior to 9.0.0246...

CVE-2022-2946

Use After Free in GitHub repository vim/vim prior to 9.0.0246...

CVE-2022-2946 Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0246...

CVE-2022-2923

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240...

Null pointer dereference

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

CVE-2022-2890

CVE-2022-2890 is a stored XSS in YetiforceCRM prior to version 6.4.0. Affected product: YetiforceCRM web application (GitHub repository). Root cause: XSS vulnerability in the application before 6.4.0 (no details on specific input vector provided in the documents). Impact: permits cross-site scrip...

CVE-2022-2890 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

Default credentials

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...

CVE-2022-1340

CVE-2022-1340 is a cross-site scripting (XSS) vulnerability in the YetiForce CRM project, present in versions prior to 6.4.0. The issue stems from improper input validation / output encoding in the repository yetiforcecrm, allowing stored XSS via uploaded content or payloads in documents. Impact ...

CVE-2022-1340 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

CVE-2022-1340 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...

CVE-2022-2930

Affected software: OctoPrint (octoprint/octoprint) prior to version 1.8.3. Root cause: unverified password change flow that allowed a password change without requiring the current password, enabling potential account compromise. Impact: high confidentiality, integrity, and availability risks as d...