6681 matches found
CVE-2022-2596
CVE-2022-2596 affects node-fetch/node-fetch prior to 3.2.10, where an inefficient regular expression can lead to denial of service. The root cause is a ReDoS in isOriginPotentiallyTrustworthy() within referrer.js. Public advisories (GitHub GHSA) confirm the vulnerability and indicate the fix is t...
CVE-2022-2596
Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10...
CVE-2022-2595 Improper Authorization in kromitgmbh/titra
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2581
CVE-2022-2581 affects Vim/vim. Description: Out-of-bounds Read in Vim prior to 9.0.0104 (root cause: illegal memory access when pattern starts with illegal byte). Public references indicate Vim 9.x fixes; for example, Mariner/Cloud/Linux advisories list updated Vim packages to mitigate, e.g., vim...
CVE-2022-2580 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589 Cross-site Scripting (XSS) - Reflected in beancount/fava
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2589 Cross-site Scripting (XSS) - Reflected in beancount/fava
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2571 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101...
CVE-2022-2571
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101...
CVE-2022-2598 Out-of-bounds Write to API in vim/vim
Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100...
CVE-2022-2598 Out-of-bounds Write to API in vim/vim
Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100...
CVE-2022-2598
Out-of-bounds Write to API in GitHub repository vim/vim prior to 9.0.0100...
CVE-2022-2564
Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6...
Code injection
Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6...
CVE-2022-2564
CVE-2022-2564 covers a Prototype Pollution vulnerability in automattic/mongoose prior to 6.4.6. Some connected records describe the issue as prototype pollution via Schema.path, which could enable modification of the Object prototype and, per related advisories, potential DoS scenarios. The publi...
CVE-2022-2550
OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5...
CVE-2022-2549
NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV...