18311 matches found
CVE-2022-0578
Code Injection in GitHub repository publify/publify prior to 9.2.8...
CVE-2022-0219
Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2...
CVE-2022-0905
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
CVE-2022-0527
Cross-site Scripting XSS - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0...
CVE-2022-0932
Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2...
CVE-2022-0743
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2023-31128
NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the master branch and commit 489bb744 on the main-0.9.x branch, the pull-checks.yml workflow is vulnerable to command injection attacks because of using an untrusted github.headref field. The github.headref value is an...
CVE-2023-4196
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3...
CVE-2023-4897
Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...
CVE-2023-4978
Cross-site Scripting XSS - DOM in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4125
Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0...
CVE-2023-4433
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4...
CVE-2023-4815
Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...
CVE-2023-4321
Cross-site Scripting XSS - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3...
CVE-2023-4033
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0...
CVE-2023-4982
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4928
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1...
CVE-2023-4195
PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3...