6764 matches found
CVE-2022-0849 Use After Free in r_reg_get_name_idx in radareorg/radare2
Use After Free in rreggetnameidx in GitHub repository radareorg/radare2 prior to 5.6.6...
CVE-2022-0849
Use After Free in rreggetnameidx in GitHub repository radareorg/radare2 prior to 5.6.6...
CVE-2022-0855
Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...
Input validation
Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...
CVE-2022-0855 Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin
Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...
CVE-2022-0855
CVE-2022-0855 affects microweber-dev/whmcs_plugin prior to version 0.0.4. The root cause is an improper resolution of path equivalence in the plugin, which can enable an open redirect or misrouting of a request. Exploitation details in the connected records describe an open-redirect scenario that...
CVE-2022-0839
Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0...
CVE-2022-0839 Improper Restriction of XML External Entity Reference in liquibase/liquibase
Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0...
CVE-2022-0839
CVE-2022-0839 affects Liquibase in liquibase/liquibase prior to 4.8.0, due to improper validation in XMLChangeLogSAXParser() that enables XML External Entity processing. This could allow a remote attacker to disclose sensitive information or perform SSRF. The documented remediation is to upgrade ...
CVE-2022-0831
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...
CVE-2022-0831 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...
CVE-2022-0752
Cross-site Scripting XSS - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9...
CVE-2022-0752 Cross-site Scripting (XSS) - Generic in hestiacp/hestiacp
Cross-site Scripting XSS - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9...
Command injection
OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11...
CVE-2022-0848 OS Command Injection in part-db/part-db
OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11...
CVE-2022-0848
Summary (CVE-2022-0848): part-db/part-db prior to 0.5.11 is vulnerable to an OS Command Injection via unrestricted file upload, enabling remote code execution on the affected web server. Multiple sources document an RCE exploit and practical PoCs (e.g., packetstorm/huntr/exploit-db) that leverage...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10...