6714 matches found
CVE-2022-2777
CVE-2022-2777 is a stored XSS in Microweber (microweber/microweber) prior to v1.3.1. The vulnerability affects the title parameter in the body of POST requests when creating/editing a category, allowing injection that is stored and rendered to other users. Multiple sources (NVD, OSV, CVE lists, a...
Denial Of Service (DoS)
vim is vulnerable to denial of service. It is possible to cause heap-based buffer overflow in GitHub repository which allows an attacker to crash the application by providing malicious input...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository kareadita/kavita prior to 0.5.4.1...
CVE-2022-2756 Server-Side Request Forgery (SSRF) in kareadita/kavita
Server-Side Request Forgery SSRF in GitHub repository kareadita/kavita prior to 0.5.4.1...
Oracle Linux 9 : vim (ELSA-2022-5942)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5942 advisory. - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vimregsubboth in regexp.c Tenable has extracted the preceding...
CVE-2022-2731
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2733
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
Authorization
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2732
CVE-2022-2732 affects OpenEMR repository openemr/openemr prior to 7.0.0.1 due to Missing Authorization and improper privilege checks. The issue enables unauthorized users to create and edit amendments via interface/patient_file/summary/add_edit_amendments.php, compromising integrity and privacy a...
CVE-2022-2733 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2713
Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0...
Session fixation
Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0...
CVE-2022-2713 Insufficient Session Expiration in cockpit-hq/cockpit
Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0...
openSUSE 15 Security Update : trivy (openSUSE-SU-2022:10081-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10081-1 advisory. - Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. CVE-2022-1996 Note that Nessus has not...
CVE-2022-2636
Improper Control of Generation of Code 'Code Injection' in GitHub repository hestiacp/hestiacp prior to 1.6.6...
Code injection
Improper Control of Generation of Code 'Code Injection' in GitHub repository hestiacp/hestiacp prior to 1.6.6...
CVE-2022-2636 Code Injection in hestiacp/hestiacp
Improper Control of Generation of Code 'Code Injection' in GitHub repository hestiacp/hestiacp prior to 1.6.6...