CVE-2022-0705

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.4.0...

CVE-2022-0893

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.4.0...

CVE-2022-0912

Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0831

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...

CVE-2022-0578

Code Injection in GitHub repository publify/publify prior to 9.2.8...

CVE-2022-0219

Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2...

CVE-2022-0905

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

CVE-2022-0527

Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0...

CVE-2022-0932

Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2...

CVE-2022-0743

Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...

CVE-2023-31128

NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the master branch and commit 489bb744 on the main-0.9.x branch, the pull-checks.yml workflow is vulnerable to command injection attacks because of using an untrusted github.headref field. The github.headref value is an...

CVE-2023-4196

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...

CVE-2023-4978

Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-4897

Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4125

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0...

CVE-2023-4433

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...

CVE-2023-4815

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

CVE-2023-4033

OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0...

CVE-2023-4321

Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...

CVE-2023-4982

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...