6602 matches found
CVE-2022-2126 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-2129
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...
CVE-2022-2124
Buffer Over-read in GitHub repository vim/vim prior to 8.2...
CVE-2022-2126
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2022-2124 Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2...
CVE-2022-2125 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-2125 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
GHSA-9HX5-JMXV-X44Q CSV Injection in inventree
Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2...
CVE-2022-2113
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...
CVE-2022-2113
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2...
CVE-2022-2113
InvenTree (open source inventory system) has a stored XSS vulnerability in versions prior to 0.7.2, arising from insufficient filtering/escaping of parameter data. The issue affects the part/description data stored and can lead to execution of malicious JavaScript on the client side when rendered...
CVE-2022-2112
CVE-2022-2112 corresponds to a CSV injection in Inventree (inventree/inventree) prior to 0.7.2, caused by improper neutralization of formula elements in CSV data (CSV escape filtering). Affected component: CSV export generation in Inventree before version 0.7.2. Impact: potential for formula inje...
Default credentials
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
CVE-2022-2098 Weak Password Requirements in kromitgmbh/titra
Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1...
Cross-site Scripting in NocoDB
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.9...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2079
CVE-2022-2079 corresponds to a stored cross-site scripting vulnerability in NocoDB (nocodb/nocodb) prior to version 0.91.7+. The issue arises from lack of proper data validation/filtering of user-supplied data and its output in the comments feature. Multiple sources (NVD/NVDR, CNVD, Red Hat, OSV,...