Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...

CVE-2022-0822 Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore

Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...

CVE-2022-0820

Cross-site Scripting XSS - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0...

Authorization

Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0...

CVE-2022-0871 Missing Authorization in gogs/gogs

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...

CVE-2022-0871

Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...

CVE-2022-0932 Missing Authorization in saleor/saleor

Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2...

CVE-2022-0821

CVE-2022-0821 affects Orchard Core (orchardcore) prior to version 1.3.0. The issue is described as improper authorization in the GitHub repository orchardcms/orchardcore, enabling a low-privilege user to create roles (as shown by Huntr/Red Hat and CNVD records). This implies a privilege/authoriza...

CVE-2022-0905

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

Authorization

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

CVE-2022-0906

CVE-2022-0906 concerns Microweber (GitHub microweber/microweber). The connected sources indicate an unrestricted file upload that can lead to a stored cross-site scripting (XSS) vulnerability in versions prior to 1.1.12. The issue is reported across multiple feeds (NVD, Red Hat, OSV, CNVD, CVE li...

CVE-2022-0906 Unrestricted file upload leads to stored XSS in microweber/microweber

Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12...

Code injection

Static Code Injection in GitHub repository microweber/microweber prior to 1.3...

CVE-2022-0895 Static Code Injection in microweber/microweber

Static Code Injection in GitHub repository microweber/microweber prior to 1.3...

Null pointer dereference

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-0890 NULL Pointer Dereference in mruby/mruby

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

CVE-2022-0890

CVE-2022-0890: NULL pointer dereference in the mruby/mruby project prior to 3.2. Affected component is the mruby interpreter. Root cause is a NULL pointer dereference, leading to availability impact as described by CVSS (local, low attack complexity, user interaction required). The entry indicate...

Improper Neutralization of Special Elements Used in a Template Engine in microweber

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3...

NULL Pointer Dereference in mruby/mruby

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...