6762 matches found
CVE-2022-2113
InvenTree (open source inventory system) has a stored XSS vulnerability in versions prior to 0.7.2, arising from insufficient filtering/escaping of parameter data. The issue affects the part/description data stored and can lead to execution of malicious JavaScript on the client side when rendered...
CVE-2022-2112
CVE-2022-2112 corresponds to a CSV injection in Inventree (inventree/inventree) prior to 0.7.2, caused by improper neutralization of formula elements in CSV data (CSV escape filtering). Affected component: CSV export generation in Inventree before version 0.7.2. Impact: potential for formula inje...
Default credentials
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
Cross-site Scripting in NocoDB
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.9...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2079
CVE-2022-2079 corresponds to a stored cross-site scripting vulnerability in NocoDB (nocodb/nocodb) prior to version 0.91.7+. The issue arises from lack of proper data validation/filtering of user-supplied data and its output in the comments feature. Multiple sources (NVD/NVDR, CNVD, Red Hat, OSV,...
GHSA-FP76-F299-V3HJ Cross-site Scripting in FacturaScripts
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2067
SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2067 SQL Injection in francoisjacquet/rosariosis
SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0...
CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2064
Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2061
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...
CVE-2022-2063
Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+...
Heap overflow
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...