6602 matches found
Session fixation
Insufficient Session Expiration in GitHub repository librenms/librenms prior to 22.10.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-4067
LibreNMS (librenms/librenms) is affected by a stored Cross-site Scripting (XSS) vulnerability in versions prior to 22.10.0. Root cause cited in sources is stored XSS; impact is consistent with XSS in the web UI. Remediation: upgrade to version 22.10.0 or later to resolve the issue. Public referen...
CVE-2022-4069 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3525
CVE-2022-3525 describes a vulnerability in the LibreNMS project (librenms/librenms) before version 22.10.0, caused by deserialization of untrusted data. The Red Hat, CNVD, CNNVD, GHSA, OSV, NVD, and CVE listings confirm this issue across multiple ecosystems, with the core impact described as seve...
CVE-2022-3562 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3561 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 22.10.0...
CVE-2022-3516 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.10.0...
Authentication flaw
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...
CVE-2022-4018
CVE-2022-4018 affects the GitHub repository ikus060/rdiffweb, with versions prior to 2.5.0a6 vulnerable due to a missing authentication mechanism for a critical function. Multiple sources (GHSA, OSV, NVD, CVE lists, PT security advisories) corroborate the issue and reference an access-control fai...
CVE-2022-2166 Improper Restriction of Excessive Authentication Attempts in mastodon/mastodon
Improper Restriction of Excessive Authentication Attempts in GitHub repository mastodon/mastodon prior to 4.0.0...
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
Impact In versions prior to v0.7.0 it was possible for an attacker to supply an invalid assertion which would trigger a panic due to a nil-pointer dereference. Patches The issue was patched in v0.7.0, released on March 2, 2022. Workarounds Callers to gosaml2 can use recover to handle panics to...
rdiffweb vulnerable to Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...
CVE-2022-3362
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...
PYSEC-2022-43000
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...
Session fixation
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...
PYSEC-2022-43000
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2783)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-3993 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...