6762 matches found
GHSA-RJVC-MF7R-CH7R Cross site scripting in yetiforce/yetiforce-crm
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-2890: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-2923
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240...
Privilege escalation
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update...
CVE-2022-0542 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-1021
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
Information disclosure
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-1021 Insecure Storage of Sensitive Information in chatwoot/chatwoot
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2022-1021
CVE-2022-1021 affects chatwoot/chatwoot prior to 2.6.0 with insecure storage of sensitive information. The connected documents corroborate this, citing risks around exposure of sensitive data (e.g., authentication-related data) and, in some sources, a cross-site scripting vector that can enable t...
CVE-2022-1021 Insecure Storage of Sensitive Information in chatwoot/chatwoot
Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2874
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224...
CVE-2022-2874
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224...
CVE-2022-2874 NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224...
CVE-2022-2874
CVE-2022-2874 targets Vim with a NULL pointer dereference in vim/vim before 9.0.0224. Affected platforms in connected docs include Vim under Ubuntu/Canonicial packages and Linux distributions; Cloud/Vulners references list the CVE across multiple feeds. Impact as stated is crash (denial of servic...