6602 matches found
CVE-2022-0368
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-0361
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-0368
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
Pimcore 跨站脚本漏洞
Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications. pimcore has a cross-site scripting...
CVE-2022-0351
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...
Design/Logic Flaw
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...
CVE-2021-3850
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...
CVE-2021-3850
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...
Authentication flaw
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...
CVE-2021-3850
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...
CVE-2021-3850
CVE-2021-3850 affects libphp-adodb, a PHP database abstraction layer used with adodb/adodb. The flaw allows injection into the PostgreSQL connection string by bypassing adodb_addslashes(), potentially enabling authentication bypass or exposing server information, depending on usage. Patches exist...
CVE-2022-0351
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...
CVE-2022-0351 Access of Memory Location Before Start of Buffer in vim/vim
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2...
Improper Access Control in janeczku/calibre-web
Description With default settings, low-level users will not have permission to read name of private shelf shelf create by another user and not in public mode. However, due to incorrect HTML render, the application does not work as intended. Proof of Concept - Step 1: Login with admin account and ...
CVE-2021-4103 Cross-site Scripting (XSS) - Stored in vanessa219/vditor
Cross-site Scripting XSS - Stored in GitHub repository vanessa219/vditor prior to 1.0.34...
CVE-2021-4172
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
CVE-2021-4172
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
Denial of service in CBOR library
Impact Due to this library's use of an inefficient algorithm, it is vulnerable to a denial of service attack when a maliciously crafted input is passed to DecodeFromBytes or other CBOR decoding mechanisms in this library. Affected versions include versions 4.0.0 through 4.5.0. This vulnerability...