6602 matches found
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...
CVE-2022-2890 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-2890
CVE-2022-2890 is a stored XSS in YetiforceCRM prior to version 6.4.0. Affected product: YetiforceCRM web application (GitHub repository). Root cause: XSS vulnerability in the application before 6.4.0 (no details on specific input vector provided in the documents). Impact: permits cross-site scrip...
CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit
Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...
Default credentials
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-1340
CVE-2022-1340 is a cross-site scripting (XSS) vulnerability in the YetiForce CRM project, present in versions prior to 6.4.0. The issue stems from improper input validation / output encoding in the repository yetiforcecrm, allowing stored XSS via uploaded content or payloads in documents. Impact ...
CVE-2022-1340 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-1340 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-2930
Affected software: OctoPrint (octoprint/octoprint) prior to version 1.8.3. Root cause: unverified password change flow that allowed a password change without requiring the current password, enabling potential account compromise. Impact: high confidentiality, integrity, and availability risks as d...
CVE-2022-2930 Unverified Password Change in octoprint/octoprint
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...
Default credentials
Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7...
Cross site scripting in yetiforce/yetiforce-crm
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
GHSA-RJVC-MF7R-CH7R Cross site scripting in yetiforce/yetiforce-crm
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2022-2923
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240...
Privilege escalation
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update...
CVE-2022-0542 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
CVE-2022-2889
Use After Free in GitHub repository vim/vim prior to 9.0.0225...
