6602 matches found
CVE-2022-0929 XSS on dynamic_text module in microweber/microweber
XSS on dynamictext module in GitHub repository microweber/microweber prior to 1.2.11...
CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0926 File upload filter bypass leading to stored XSS in microweber/microweber
File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0880
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
CVE-2022-0880 Cross-site Scripting (XSS) - Stored in star7th/showdoc
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
CVE-2022-0880
CVE-2022-0880 affects ShowDoc (star7th/showdoc) up to version 2.10.2, with stored XSS via attachments in the File Library (notably XML uploads) as reported by multiple sources. The vulnerability arises from stored XSS in the web interface when handling uploaded attachments, leading to script exec...
Denial Of Service (DoS)
vim is vulnerable to denial of service. The vulnerability exists due to a Stack-based Buffer Overflow in GitHub repository vim/vim...
Design/Logic Flaw
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers
Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...
CVE-2022-0921 Abusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber
Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12...
CVE-2022-0932
Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2...
Authorization
Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2...
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
Authorization
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
PYSEC-2022-177
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
CVE-2022-0860 Improper Authorization in cobbler/cobbler
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...