CVE-2022-2523 Cross-site Scripting (XSS) - Reflected in beancount/fava

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2...

CVE-2022-2523 Cross-site Scripting (XSS) - Reflected in beancount/fava

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2...

CVE-2022-2523

Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2...

CVE-2022-2522 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061...

CVE-2022-2522

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061...

CVE-2022-2470

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2494

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...

CVE-2022-2495 Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2495

Microweber (GitHub: microweber/microweber) is affected by a stored Cross-site Scripting (XSS) vulnerability arising in versions prior to 1.2.21. The issue stems from how SVG uploads are handled, allowing stored XSS when users upload SVG files. Multiple sources (CVE-2022-2495 records, CNVD-2022-54...

EUVD-2022-34753

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...

CVE-2022-2493 Data Access from Outside Expected Data Manager Component in openemr/openemr

Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...

CVE-2022-2493

CVE-2022-2493 affects OpenEMR prior to 7.0.0, where a missing functional-level access control allows non-privileged users to access administrator modules, enabling data access outside the expected Data Manager boundary. Reports and CVSS data confirm a HIGH-severity impact with confidentiality and...

Amazon Linux 2 : vim (ALAS-2022-1829)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1829 advisory. Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote...

CVE-2022-2453

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...

CVE-2022-2453

Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...

CVE-2022-2454

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV...

Integer overflow

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV...