6762 matches found
Design/Logic Flaw
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
Sql injection
SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0...
Information disclosure
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2...
CVE-2022-1883
The Terraboard web panel for visualizing Terraform status is vulnerable to a SQL injection in versions prior to 2.2.0 . The flaw exists in the api.SearchAttribute method, specifically within the db.SearchAttribute function. When the tf_version or lineage_value request parameters are provided, the...
PT-2022-14134
Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 18.1.2 Description The issue concerns exposure of sensitive information to an unauthorized actor in the GitHub repository. Recommendations For versions prior to 18.1.2, update to version 18.1.2 or later to resol...
CVE-2022-1851 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-1851
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-1851 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-1851
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-1849
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...
Session fixation
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...
Path traversal
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1848
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
Code injection
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
CVE-2022-1850 Path Traversal in filegator/filegator
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1849 Session Fixation in filegator/filegator
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...
CVE-2022-1848 Business Logic Errors in erudika/para
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public, any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account...