6602 matches found
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository gogs/gogs prior to 0.12.5...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11...
Integer overflow
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0913 Integer Overflow or Wraparound in microweber/microweber
Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0913
CVE-2022-0913 affects microweber/microweber prior to 1.3. The issue is an Integer Overflow/Wraparound occurring in input handling (e.g., long text in fields such as town/ZIP/state/address) that can lead to denial of service. Red Hat and multiple vulnerability databases corroborate the description...
CVE-2022-0822
Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...
CVE-2022-0822
Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...
CVE-2022-0822 Cross-site Scripting (XSS) - Reflected in orchardcms/orchardcore
Cross-site Scripting XSS - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0...
CVE-2022-0820
Cross-site Scripting XSS - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0...
Authorization
Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0...
CVE-2022-0871 Missing Authorization in gogs/gogs
Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...
CVE-2022-0871
Missing Authorization in GitHub repository gogs/gogs prior to 0.12.5...
CVE-2022-0932 Missing Authorization in saleor/saleor
Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2...
CVE-2022-0821
CVE-2022-0821 affects Orchard Core (orchardcore) prior to version 1.3.0. The issue is described as improper authorization in the GitHub repository orchardcms/orchardcore, enabling a low-privilege user to create roles (as shown by Huntr/Red Hat and CNVD records). This implies a privilege/authoriza...
CVE-2022-0905
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
Authorization
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
CVE-2022-0906
CVE-2022-0906 concerns Microweber (GitHub microweber/microweber). The connected sources indicate an unrestricted file upload that can lead to a stored cross-site scripting (XSS) vulnerability in versions prior to 1.1.12. The issue is reported across multiple feeds (NVD, Red Hat, OSV, CNVD, CVE li...