6573 matches found
Code injection
Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...
CVE-2022-0819 Code Injection in dolibarr/dolibarr
Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1...
CVE-2022-0824
Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990...
CVE-2022-0829
Improper Authorization in GitHub repository webmin/webmin prior to 1.990...
CVE-2022-0829
Improper Authorization in GitHub repository webmin/webmin prior to 1.990...
CVE-2022-0577
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
PYSEC-2022-159
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
UBUNTU-CVE-2022-0577
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
CVE-2022-0577
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
CVE-2022-0577 Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
py-Scrapy -- exposure of sensitive information vulnerability
ranjit-git reports: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
CVE-2022-0776
Cross-site Scripting XSS - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0...
Default credentials
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0777 Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
Microweber logic flaw vulnerability
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A logic flaw vulnerability exists in Microweber, which stems from an error in the business...
CVE-2022-0743
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2022-0743 Cross-site Scripting (XSS) - Stored in getgrav/grav
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository rudloff/alltube prior to 3.0.2...
CVE-2022-0768
CVE-2022-0768 describes a Server-Side Request Forgery in the GitHub repository rudloff/alltube, affecting releases prior to 3.0.2. The impact is the ability to send requests to an internal hostname due to the SSRF flaw. The Red Hat, OSV, GitHub advisory entries corroborate this SSRF issue and ind...
CVE-2022-0772
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...