517 matches found
CVE-2022-0596
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...
Open redirect
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
Input validation
Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0597 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0597 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0597
Microweber (packagist/microweber) vulnerability CVE-2022-0597: Open Redirect in versions prior to 1.2.11. The issue is triggered by a redirect_to parameter, enabling redirection to potentially malicious sites. Remediation: upgrade to version 1.2.11 or later. If exploits or in-the-wild details are...
CVE-2022-0589
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
CVE-2022-0588
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0588
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
Authorization
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...
Authorization
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0589
CVE-2022-0589 is a Cross-site Scripting (XSS) vulnerability in librenms/librenms, stored XSS prior to version 22.1.0. The root cause cited across sources is lack of data validation/filtering and output in templates (notably Create/Modify Transfer Group, Add/Edit Service, and Edit Service), leadin...
CVE-2022-0589 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...
CVE-2022-0588
The CVE-2022-0588 entry refers to an information-disclosure vulnerability in librenms/librenms due to Missing Authorization prior to version 22.2.0. Multiple connected sources (Red Hat, OSV, CNVD, GHSA advisories, and PT-2022-13283) confirm that unauthorised access could expose sensitive informat...
CVE-2022-0588 Missing Authorization in librenms/librenms
Missing Authorization in Packagist librenms/librenms prior to 22.2.0...