34 matches found
EUVD-2022-0102
Malicious code in bioql PyPI...
EUVD-2022-0101
Malicious code in bioql PyPI...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2523
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
DEBIAN-CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
PYSEC-2022-246
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
PYSEC-2022-246
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
UBUNTU-CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589
CVE-2022-2589 affects the Beancount/Fava project: a reflected Cross-site Scripting (XSS) vulnerability due to improper validation on filter conversion in Fava before version 1.22.3. Affected component: Fava web UI logic (filter handling). Impact: potential credential or data exposure via crafted ...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589 Cross-site Scripting (XSS) - Reflected in beancount/fava
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589 Cross-site Scripting (XSS) - Reflected in beancount/fava
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
fava 跨站脚本漏洞
fava is the web interface for Beancount, a double-entry bookkeeping software open source by Beancount. A cross-site scripting vulnerability exists in fava, which stems from a cross-site scripting vulnerability in fava before 1.22.3...
CVE-2022-2589: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
GHSA-Q8HG-3VQV-F8V3 Fava vulnerable to Reflected Cross-site Scripting
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2. The querystring parameter of Fava is vulnerable to reflected cross-site scripting, for which a attacker can modify any information that the user is able to modify. This issue is fixed in version 1.22.2...