516 matches found
Microweber 注入漏洞
Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. Microweber suffers from an injection vulnerability that originates due to a lack of...
CVE-2022-0638
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0638
CVE-2022-0638: Cross-Site Request Forgery in microweber/microweber prior to 1.2.11. Multiple sources confirm a CSRF vulnerability in microweber versions before 1.2.11. Reported impact includes the ability for an attacker to cause user logout via forged requests (per Huntr details; other entries d...
CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber
Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0622
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...
Information disclosure
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...
CVE-2022-0622
Affected software: snipe-it (Packagist package snipe/snipe-it). Vulnerability: Generation of an error message containing sensitive information in Snipe-IT prior to version 5.3.11, leading to information exposure. Root cause/impact: The error handling path in the application reveals sensitive data...
CVE-2022-0622 Generation of Error Message Containing Sensitive Information in snipe/snipe-it
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...
CVE-2022-0622 Generation of Error Message Containing Sensitive Information in snipe/snipe-it
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...
GHSA-H2FJ-77WH-FH5W Cross-site Scripting in livehelperchat
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
Cross-site Scripting in livehelperchat
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
snipe-it 安全漏洞
Snipe-IT is an open source IT asset/license management system. snipe-it has a security vulnerability that stems from the generation of error messages containing sensitive information in Packagist snipe/snipe-it prior to 5.3.11. No detailed vulnerability details are currently available...
CVE-2022-0612
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0612
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
CVE-2022-0612
CVE-2022-0612 describes a stored Cross-site Scripting (XSS) in the Packagist package remdex/livehelperchat, prior to version 3.93. The issue arises from insufficient validation of client-side data by the web application, enabling injection of script via stored payloads. Affected component is the ...