6764 matches found
py-Scrapy -- exposure of sensitive information vulnerability
ranjit-git reports: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
CVE-2022-0776
Cross-site Scripting XSS - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0...
Default credentials
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0777 Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber
Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...
Microweber logic flaw vulnerability
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A logic flaw vulnerability exists in Microweber, which stems from an error in the business...
CVE-2022-0743
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
CVE-2022-0743 Cross-site Scripting (XSS) - Stored in getgrav/grav
Cross-site Scripting XSS - Stored in GitHub repository getgrav/grav prior to 1.7.31...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository rudloff/alltube prior to 3.0.2...
CVE-2022-0768
CVE-2022-0768 describes a Server-Side Request Forgery in the GitHub repository rudloff/alltube, affecting releases prior to 3.0.2. The impact is the ability to send requests to an internal hostname due to the SSRF flaw. The Red Hat, OSV, GitHub advisory entries corroborate this SSRF issue and ind...
CVE-2022-0772
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
CVE-2022-0772
LibreNMS (librenms/librenms) contains a Stored XSS vulnerability that affects versions before 22.2.2. Root cause: improper handling/validation of client-side data in the web application. Impact per sources: Cross-site scripting with potential for user-assisted or automatic execution of client-sid...
CVE-2021-3967
Improper Access Control in GitHub repository zulip/zulip prior to 4.10...
CVE-2022-0764
Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0...
Command injection
Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0...
CVE-2022-0764 Arbitrary Command Injection in strapi/strapi
Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0...
CVE-2022-0764
Strapi (strapi/strapi) is affected by CVE-2022-0764: an OS command injection vulnerability in versions prior to 4.1.0 due to improper sanitization of user input when creating an app via the template CLI argument. Impact is arbitrary command execution with local access. Mitigation: update to 4.1.0...
CVE-2022-0764 Arbitrary Command Injection in strapi/strapi
Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0...