11002 matches found
CVE-2022-0960
Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4...
CVE-2022-0946
Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4...
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
CVE-2022-0341
Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 3.8.12...
CVE-2022-0341 Cross-site Scripting (XSS) - Stored in vanessa219/vditor
Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 3.8.12...
WordPress plugin 跨站脚本漏洞
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Master Addons for Elementor plugin versions prior to 1.8.5 contain a cross-site scripting vulnerability that stems from the plugin's...
PT-2022-9560 · Unknown · Wpcargo Track & Trace
Name of the Vulnerable Software and Affected Versions: WPCargo Track & Trace versions prior to 6.9.0 Description: The issue allows unauthenticated attackers to write a PHP file anywhere on the web server, leading to remote code execution RCE. Recommendations: For versions prior to 6.9.0, update t...
CVE-2022-0880
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
CVE-2021-32009
Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.5...
CVE-2022-0822
Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...
CVE-2022-0822
Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...
CVE-2022-0822 Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore
Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...
CVE-2022-0871
CVE-2022-0871 affects Gogs (gogs/gogs) prior to 0.12.5 and is described as Missing Authorization. Connected advisories/documents consistently describe improper PAM authorization handling as the root cause and indicate that updated builds fix the issue, recommending upgrading to 0.12.5 or (for new...
Microweber 代码问题漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A remote code execution vulnerability exists in versions of microweber prior to 1.2.12, which...
CVE-2022-21946
A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory...
CVE-2022-0871 Missing Authorization in gogs/gogs
Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...
Softing OPC UA C++ SDK 代码问题漏洞
The Softing OPC UA C++ SDK is a development kit from Softing Germany. It is used to quickly and easily integrate OPC UA clients and servers. A security vulnerability exists in Softing OPC UA C++ SDK versions prior to 5.70. The vulnerability stems from the fact that an incorrectly formatted OPC/UA...
