CVE-2022-0660

Microweber before 1.2.11 is affected by an information-disclosure vulnerability in microweber/microweber. An error message generated when viewing load_module:comments#search exposes sensitive information, potentially enabling an attacker to obtain sensitive data and, per the nuclei template, poss...

Microweber 注入漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. Microweber suffers from an injection vulnerability that originates due to a lack of...

An unspecified vulnerability exists in snipe-it (CNVD-2022-13366)

Snipe-IT is an open source IT asset/license management system. snipe-it has a security vulnerability that stems from the generation of error messages containing sensitive information in Packagist snipe/snipe-it prior to 5.3.11. No detailed vulnerability details are currently available...

CVE-2022-0638

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0638

CVE-2022-0638: Cross-Site Request Forgery in microweber/microweber prior to 1.2.11. Multiple sources confirm a CSRF vulnerability in microweber versions before 1.2.11. Reported impact includes the ability for an attacker to cause user logout via forged requests (per Huntr details; other entries d...

CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0638 Cross-Site Request Forgery (CSRF) in microweber/microweber

Cross-Site Request Forgery CSRF in Packagist microweber/microweber prior to 1.2.11...

CVE-2022-0622

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...

Information disclosure

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...

CVE-2022-0622

Affected software: snipe-it (Packagist package snipe/snipe-it). Vulnerability: Generation of an error message containing sensitive information in Snipe-IT prior to version 5.3.11, leading to information exposure. Root cause/impact: The error handling path in the application reveals sensitive data...

CVE-2022-0622 Generation of Error Message Containing Sensitive Information in snipe/snipe-it

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...

CVE-2022-0622 Generation of Error Message Containing Sensitive Information in snipe/snipe-it

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11...

Cross-site Scripting in livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

GHSA-H2FJ-77WH-FH5W Cross-site Scripting in livehelperchat

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

snipe-it 安全漏洞

Snipe-IT is an open source IT asset/license management system. snipe-it has a security vulnerability that stems from the generation of error messages containing sensitive information in Packagist snipe/snipe-it prior to 5.3.11. No detailed vulnerability details are currently available...

CVE-2022-0612

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0612

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

Cross site scripting

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

CVE-2022-0612

CVE-2022-0612 describes a stored Cross-site Scripting (XSS) in the Packagist package remdex/livehelperchat, prior to version 3.93. The issue arises from insufficient validation of client-side data by the web application, enabling injection of script via stored payloads. Affected component is the ...