6762 matches found
CVE-2022-2523
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.2...
CVE-2022-2522 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061...
CVE-2022-2522
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061...
CVE-2022-2470
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
CVE-2022-2470 Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...
CVE-2022-2494
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2495
Microweber (GitHub: microweber/microweber) is affected by a stored Cross-site Scripting (XSS) vulnerability arising in versions prior to 1.2.21. The issue stems from how SVG uploads are handled, allowing stored XSS when users upload SVG files. Multiple sources (CVE-2022-2495 records, CNVD-2022-54...
CVE-2022-2495 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...
EUVD-2022-34753
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2493 Data Access from Outside Expected Data Manager Component in openemr/openemr
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2493
CVE-2022-2493 affects OpenEMR prior to 7.0.0, where a missing functional-level access control allows non-privileged users to access administrator modules, enabling data access outside the expected Data Manager boundary. Reports and CVSS data confirm a HIGH-severity impact with confidentiality and...
Amazon Linux 2 : vim (ALAS-2022-1829)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1829 advisory. Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote...
CVE-2022-2453
Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...
Integer overflow
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV...
CVE-2022-2454
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV...
CVE-2022-2453
Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...