6762 matches found
CVE-2022-2816 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...
CVE-2022-2817 Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0213...
CVE-2022-2816
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0212...
CVE-2022-2817
Use After Free in GitHub repository vim/vim prior to 9.0.0213...
Out-of-bounds Write
vim:sid is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds write in GitHub repository...
CVE-2022-2777 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.1...
CVE-2022-2777
CVE-2022-2777 is a stored XSS in Microweber (microweber/microweber) prior to v1.3.1. The vulnerability affects the title parameter in the body of POST requests when creating/editing a category, allowing injection that is stored and rendered to other users. Multiple sources (NVD, OSV, CVE lists, a...
Denial Of Service (DoS)
vim is vulnerable to denial of service. It is possible to cause heap-based buffer overflow in GitHub repository which allows an attacker to crash the application by providing malicious input...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository kareadita/kavita prior to 0.5.4.1...
CVE-2022-2756 Server-Side Request Forgery (SSRF) in kareadita/kavita
Server-Side Request Forgery SSRF in GitHub repository kareadita/kavita prior to 0.5.4.1...
Oracle Linux 9 : vim (ELSA-2022-5942)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5942 advisory. - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vimregsubboth in regexp.c Tenable has extracted the preceding...
CVE-2022-2733
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2731
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1...
Authorization
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2732
CVE-2022-2732 affects OpenEMR repository openemr/openemr prior to 7.0.0.1 due to Missing Authorization and improper privilege checks. The issue enables unauthorized users to create and edit amendments via interface/patient_file/summary/add_edit_amendments.php, compromising integrity and privacy a...
CVE-2022-2733 Cross-site Scripting (XSS) - Reflected in openemr/openemr
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2022-2713
Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0...