518 matches found
CVE-2022-0576
CVE-2022-0576 affects librenms/librenms (prior to 22.1.0) with a Cross-site Scripting (XSS) vulnerability arising from insufficient sanitization in the Transport name field in alert-transports.inc.php. The vulnerability is described in connected sources as a generic XSS in the Librenms package, w...
CVE-2022-0569 Observable Discrepancy in snipe/snipe-it
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9...
CVE-2022-0569
CVE-2022-0569 affects snipe/snipe-it, prior to v5.3.9, with an information-disclosure flaw caused by differences in password-reset responses that can enumerate registered user emails. Impact is information disclosure (email enumeration) and potential brute-force risk implied by exposed email list...
CVE-2022-0569 Observable Discrepancy in snipe/snipe-it
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9...
CVE-2022-0565 Cross-site Scripting in pimcore/pimcore
Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1...
CVE-2022-0565
CVE-2022-0565 affects pimcore/pimcore prior to version 10.3.1, with a Cross-site Scripting vulnerability and information disclosure exposure. The issue stems from improper handling that allows sensitive information leakage to unauthorized participants. Public references consistently cite upgradin...
CVE-2022-0565 Cross-site Scripting in pimcore/pimcore
Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1...
CVE-2022-0565 Cross-site Scripting in pimcore/pimcore
Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1...
CVE-2022-0560
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0560
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
Open redirect
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0560 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0560
CVE-2022-0560 describes an open redirect in microweber/microweber prior to version 1.2.11. The vulnerability arises from insufficient validation of a URL parameter, allowing an attacker to redirect users to a malicious site. Affected software: microweber/microweber (Packagist). Impact is informat...
CVE-2022-0560 Open Redirect in microweber/microweber
Open Redirect in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
Command injection
OS Command Injection in Packagist microweber/microweber prior to 1.2.11...
CVE-2022-0557
CVE-2022-0557 describes an OS Command Injection in the Packagist Microweber/Microweber package prior to version 1.2.11. Public advisories and exploits indicate an authenticated remote code execution path via uploaded content or crafted inputs that bypass input validation, enabling an attacker to ...