6764 matches found
CVE-2022-2037 Excessive Attack Surface in tooljet/tooljet
Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0...
CVE-2022-1986 OS Command Injection in gogs/gogs
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9...
GHSA-WJH9-344G-VC49 Cross-site Scripting in RosarioSIS
Cross-site Scripting XSS - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0...
Authorization Bypass Through User-Controlled Key in go-restful
Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...
GHSA-R48Q-9G5R-8Q2H Authorization Bypass Through User-Controlled Key in go-restful
Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...
PT-2022-14594
Name of the Vulnerable Software and Affected Versions tooljet/tooljet versions prior to v1.16.0 Description The issue concerns an excessive attack surface in the GitHub repository tooljet/tooljet. Recommendations For versions prior to v1.16.0, update to version v1.16.0 or later to resolve the iss...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0...
CVE-2022-1993 Path Traversal in gogs/gogs
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-1992 Path Traversal in gogs/gogs
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9...
CVE-2022-1996
Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...
CVE-2022-2026 Cross-site Scripting (XSS) - Stored in kromitgmbh/titra
Cross-site Scripting XSS - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2026
Cross-site Scripting XSS - Stored in GitHub repository kromitgmbh/titra prior to 0.77.0...
CVE-2022-2015 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2015 Cross-site Scripting (XSS) - Stored in jgraph/drawio
Cross-site Scripting XSS - Stored in GitHub repository jgraph/drawio prior to 19.0.2...
CVE-2022-2014 Code Injection in jgraph/drawio
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2...
PT-2022-14377
Name of the Vulnerable Software and Affected Versions jgraph/drawio versions prior to 19.0.2 Description The issue concerns a code injection problem in the jgraph/drawio GitHub repository. Recommendations For versions prior to 19.0.2, update to version 19.0.2 or later to resolve the issue...
CVE-2022-2022
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7...