586 matches found
CVE-2022-2063 Improper Privilege Management in nocodb/nocodb
Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2062 Generation of Error Message Containing Sensitive Information in nocodb/nocodb
Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2062: Generation of Error Message Containing Sensitive Information
Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2062
CVE-2022-2062 affects nocodb/nocodb prior to 0.91.7+. The issue is with generation of error messages that disclose sensitive information and with the SMTP plugin lacking verification/validation, enabling potential exposure of internal data. Multiple connected sources corroborate the vulnerability...
NocoDB 代码问题漏洞
NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. A code issue vulnerability exists in NocoDB versions prior to 0.91.7+. An attacker could exploit this vulnerability to obtain sensitive information...
CVE-2022-2062
Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+...
PT-2022-14831
Name of the Vulnerable Software and Affected Versions nocodb/nocodb versions prior to 0.91.7+ Description The issue concerns improper privilege management. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...
PT-2022-14832
Name of the Vulnerable Software and Affected Versions nocodb/nocodb versions prior to 0.91.9 Description The issue is related to insufficient session expiration in the GitHub repository nocodb/nocodb. Recommendations For versions prior to 0.91.9, update to version 0.91.9 or later to resolve the...
NocoDB 安全漏洞
NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. A security vulnerability exists in NocoDB versions prior to 0.91.7+ that stems from incorrect privilege management...
NocoDB 代码问题漏洞
NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb into a smart spreadsheet. A security vulnerability exists in NocoDB versions prior to 0.91.7+ that stems from insufficient session expiration...
CVE-2022-2063: Improper Privilege Management
Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2064: Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2062 Generation of Error Message Containing Sensitive Information in nocodb/nocodb
Generation of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+...
Stored Cross-Site Scripting
Description A stored cross-site scripting vulnerability exists within the Gallery View comments functionality. Replication Steps and PoC Preconditions PC1. A project exists. PC2. A table with a sheet containing data exists in the project. PC3. A gallery view exists. PC4. A user with the editor ro...
CVE-2022-2022
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7...
CVE-2022-2022 Cross-site Scripting (XSS) - Stored in nocodb/nocodb
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7...
CVE-2022-2022
Cross-site Scripting XSS - Stored in GitHub repository nocodb/nocodb prior to 0.91.7...
CVE-2022-2022
CVE-2022-2022 is a stored XSS vulnerability in NocoDB (nocodb/nocodb) prior to 0.91.7. Affected component is the web app input handling (e.g., Project Title) that can inject scripts into pages, enabling context with user interaction. Public documents indicate an XSS risk has been demonstrated in ...