Information disclosure

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...

CVE-2022-1883

CVE-2022-1883 affects Terraboard prior to 2.2.0. A SQL injection vulnerability exists in the web API (notably the /api/search/attribute endpoint) where user-supplied parameters (e.g., tf_version) are concatenated into SQL, enabling attackers to craft inputs that alter queries. Impact described ac...

CVE-2022-1851 Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1851 Out-of-bounds Read in vim/vim

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1851

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1851

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...

CVE-2022-1849

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

Session fixation

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

Path traversal

Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1848

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...

Code injection

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...

CVE-2022-1850 Path Traversal in filegator/filegator

Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849 Session Fixation in filegator/filegator

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1848 Business Logic Errors in erudika/para

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public, any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account...

CVE-2022-1811

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

CVE-2022-1811 Unrestricted Upload of File with Dangerous Type in publify/publify

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

CVE-2022-1811 Unrestricted Upload of File with Dangerous Type in publify/publify

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

CVE-2022-1810

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9...