CVE-2022-0820

Cross-site Scripting XSS - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0...

Authorization

Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0...

CVE-2022-0871

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...

CVE-2022-0871 Missing Authorization in gogs/gogs

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...

CVE-2022-0932 Missing Authorization in saleor/saleor

Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2...

CVE-2022-0821

CVE-2022-0821 affects Orchard Core (orchardcore) prior to version 1.3.0. The issue is described as improper authorization in the GitHub repository orchardcms/orchardcore, enabling a low-privilege user to create roles (as shown by Huntr/Red Hat and CNVD records). This implies a privilege/authoriza...

CVE-2022-0905

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

Authorization

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

CVE-2022-0906 Unrestricted file upload leads to stored XSS in microweber/microweber

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...

CVE-2022-0906

CVE-2022-0906 concerns Microweber (GitHub microweber/microweber). The connected sources indicate an unrestricted file upload that can lead to a stored cross-site scripting (XSS) vulnerability in versions prior to 1.1.12. The issue is reported across multiple feeds (NVD, Red Hat, OSV, CNVD, CVE li...

Code injection

Static Code Injection in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0895 Static Code Injection in microweber/microweber

Static Code Injection in GitHub repository microweber/microweber prior to 1.3...

Null pointer dereference

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-0890 NULL Pointer Dereference in mruby/mruby

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-0890

CVE-2022-0890: NULL pointer dereference in the mruby/mruby project prior to 3.2. Affected component is the mruby interpreter. Root cause is a NULL pointer dereference, leading to availability impact as described by CVSS (local, low attack complexity, user interaction required). The entry indicate...

Improper Neutralization of Special Elements Used in a Template Engine in microweber

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...

NULL Pointer Dereference in mruby/mruby

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-0905 Missing Authorization in go-gitea/gitea

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

Input validation

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...