6764 matches found
CVE-2022-0731 Improper Access Control (IDOR) in dolibarr/dolibarr
Improper Access Control IDOR in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-0476
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4...
CVE-2022-0476
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4...
Denial of service
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4...
CVE-2022-0476
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4...
CVE-2022-0476 Denial of Service in radareorg/radare2
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4...
CVE-2022-0476
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4...
CVE-2022-0729
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440...
CVE-2022-0726
Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0...
Improper access control
Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0...
Design/Logic Flaw
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440...
Authorization
Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0...
CVE-2022-0729
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440...
CVE-2022-0727
CVE-2022-0727 affects chocobozzz/peertube (prior to version 4.1.0) with improper access control. The Red Hat/ENISA/CNVD/OSV/etc. entries and the Huntr PoC confirm the root cause: the app does not properly check video status when making data changes, enabling a user to rate private videos via API ...
CVE-2022-0724
Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3...
Information disclosure
Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3...
Code injection
Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3...
CVE-2022-0724
Vulnerability summary (CVE-2022-0724): In microweber/microweber, versions before 1.3 store uploaded profile images with EXIF data intact, causing information disclosure. The root cause is that EXIF data is not stripped during upload, exposing user geolocation, device information, and software det...
CVE-2022-0721 Insertion of Sensitive Information Into Debugging Code in microweber/microweber
Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3...