6602 matches found
CVE-2022-2631
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...
CVE-2022-2631 Improper Access Control in tooljet/tooljet
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...
CVE-2022-2631 Improper Access Control in tooljet/tooljet
Improper Access Control in GitHub repository tooljet/tooljet prior to v1.19.0...
CVE-2022-2596
Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
CVE-2022-2581
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104...
CVE-2022-2595
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2580
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102...
CVE-2022-2581
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104...
CVE-2022-2571
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101...
CVE-2022-2571
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101...
CVE-2022-2596
Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10...
CVE-2022-2589
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
Authorization
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
PYSEC-2022-246
Cross-site Scripting XSS - Reflected in GitHub repository beancount/fava prior to 1.22.3...
Heap overflow
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102...
Design/Logic Flaw
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0104...
Design/Logic Flaw
Inefficient Regular Expression Complexity in GitHub repository node-fetch/node-fetch prior to 3.2.10...
CVE-2022-2596
CVE-2022-2596 affects node-fetch/node-fetch prior to 3.2.10, where an inefficient regular expression can lead to denial of service. The root cause is a ReDoS in isOriginPotentiallyTrustworthy() within referrer.js. Public advisories (GitHub GHSA) confirm the vulnerability and indicate the fix is t...