GHSA-VXH4-X6GV-MPHF Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

Cross-Site Request Forgery CSRF in GitHub repository livehelperchat/livehelperchat...

Xxe

Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2...

CVE-2022-0219 Improper Restriction of XML External Entity Reference in skylot/jadx

Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2...

CVE-2021-3866

Cross-site Scripting XSS - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6af710438b153d and prior to 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6...

CVE-2021-3866

Cross-site Scripting XSS - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6af710438b153d and prior to 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6...

CVE-2022-0261

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2021-4146

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

Heap overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Code injection

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

CVE-2021-4146 Business Logic Errors in pimcore/pimcore

Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6...

CVE-2022-0260

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.2.7...

CVE-2022-0260

CVE-2022-0260 affects pimcore/pimcore (GitHub repository) where a Stored XSS vulnerability exists in Pimcore prior to version 10.2.7. Multiple sources corroborate a Stored XSS in Pimcore, notably in the Name field of the Global Targeting Rules (GHSA-455W-GV5P-WGG3), and the CVE descriptions indic...

CVE-2022-0261 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-0261

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0...

CVE-2022-0242

CVE-2022-0242 overview (supported by connected docs): An unrestricted upload of a dangerous file type in crater-invoice/crater prior to version 6.0 allows uploading arbitrary PHP code via the user avatar field, enabling remote code execution. PoC demonstrates uploading s.php and retrieving execut...

CVE-2021-25067

creationtimestamp| type| source ---|---|--- 2022-01-17 16:23:26+00:00| seen| https://t.me/cibsecurity/35672 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25067.yaml...

CVE-2021-24838

creationtimestamp| type| source ---|---|--- 2022-01-17 16:23:16+00:00| seen| https://t.me/cibsecurity/35666 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24838.yaml...

RUSTSEC-2022-0044 `markdown` (1.0.0 and higher) is maintained

A new markdown crate has been brought over by a new maintainer replacing the old crate. The crate GitHub repository is now wooorm/markdown-rs This advisory has been withdraw since version 1.0.0 was released on 2025-04-23. markdown 0.3.0 and lower was unmaintained The old markdown crate was no...

`markdown` (1.0.0 and higher) is maintained

A new markdown crate has been brought over by a new maintainer replacing the old crate. The crate GitHub repository is now wooorm/markdown-rs This advisory has been withdraw since version 1.0.0 was released on 2025-04-23. markdown 0.3.0 and lower was unmaintained The old markdown crate was no...