CVE-2022-1850 Path Traversal in filegator/filegator

Path Traversal in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849 Session Fixation in filegator/filegator

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1848 Business Logic Errors in erudika/para

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public, any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account...

CVE-2022-1811

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

CVE-2022-1811 Unrestricted Upload of File with Dangerous Type in publify/publify

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

CVE-2022-1811 Unrestricted Upload of File with Dangerous Type in publify/publify

Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9...

CVE-2022-1810

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9...

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9...

CVE-2022-1825 Cross-site Scripting (XSS) - Reflected in collectiveaccess/providence

Cross-site Scripting XSS - Reflected in GitHub repository collectiveaccess/providence prior to 1.8...

CVE-2022-1810 Authorization Bypass Through User-Controlled Key in publify/publify

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9...

Command injection

OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...

CVE-2022-1813

CVE-2022-1813 describes an OS Command Injection in the GitHub project yogeshojha/rengine before version 1.2.0. The vulnerability allows arbitrary OS commands to be executed, with network access as the attack vector and no authentication required (per NVD: AV:N/AC:L/PR:N/UI:N/S:U). Affected compon...

CVE-2022-1813 OS Command Injection in yogeshojha/rengine

OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...

Null pointer dereference

Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0...

CVE-2022-1809

Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0...

CVE-2022-1809 Access of Uninitialized Pointer in radareorg/radare2

Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0...

CVE-2022-1809

Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0...

CVE-2022-1809

Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0...