Export limit exceeded: 373393 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (373393 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-1179 | 1 Open-emr | 1 Openemr | 2024-11-21 | 5.4 Medium |
| Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. | ||||
| CVE-2022-1178 | 1 Open-emr | 1 Openemr | 2024-11-21 | 5.4 Medium |
| Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. | ||||
| CVE-2022-1177 | 1 Open-emr | 1 Openemr | 2024-11-21 | 4.3 Medium |
| Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0. | ||||
| CVE-2022-1176 | 1 Livehelperchat | 1 Live Helper Chat | 2024-11-21 | 7.5 High |
| Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96. | ||||
| CVE-2022-1175 | 1 Gitlab | 1 Gitlab | 2024-11-21 | 8.7 High |
| Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes. | ||||
| CVE-2022-1174 | 1 Gitlab | 1 Gitlab | 2024-11-21 | 4.3 Medium |
| A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to trigger high CPU usage via a special crafted input added in Issues, Merge requests, Milestones, Snippets, Wiki pages, etc. | ||||
| CVE-2022-1173 | 1 Getgrav | 1 Grav | 2024-11-21 | 5.4 Medium |
| stored xss in GitHub repository getgrav/grav prior to 1.7.33. | ||||
| CVE-2022-1172 | 1 Gpac | 1 Gpac | 2024-11-21 | 5.0 Medium |
| Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV. | ||||
| CVE-2022-1171 | 1 Vertical Scroll Recent Post Project | 1 Vertical Scroll Recent Post | 2024-11-21 | 6.1 Medium |
| The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting | ||||
| CVE-2022-1170 | 1 Nootheme | 1 Jobmonster | 2024-11-21 | 6.1 Medium |
| In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests. | ||||
| CVE-2022-1169 | 1 Eyecix | 1 Careerfy | 2024-11-21 | 6.1 Medium |
| There is a XSS vulnerability in Careerfy. | ||||
| CVE-2022-1168 | 1 Eyecix | 1 Jobsearch Wp Job Board | 2024-11-21 | 6.1 Medium |
| There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1. | ||||
| CVE-2022-1167 | 1 Apusthemes | 1 Careerup | 2024-11-21 | 6.1 Medium |
| There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the filter parameters. | ||||
| CVE-2022-1166 | 1 Nootheme | 1 Jobmonster | 2024-11-21 | 5.3 Medium |
| The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP file, or .htaccess file. This could expose personal data such as people's resumes. Although Directory Listing can be prevented by securely configuring the web server, vendors can also take measures to make it less likely to happen. | ||||
| CVE-2022-1165 | 1 Plugin-planet | 1 Blackhole For Bad Bots | 2024-11-21 | 9.1 Critical |
| The Blackhole for Bad Bots WordPress plugin before 3.3.2 uses headers such as CF-CONNECTING-IP, CLIENT-IP etc to determine the IP address of requests hitting the blackhole URL, which allows them to be spoofed. This could result in blocking arbitrary IP addresses, such as legitimate/good search engine crawlers / bots. This could also be abused by competitors to cause damage related to visibility in search engines, can be used to bypass arbitrary blocks caused by this plugin, block any visitor or even the administrator and even more. | ||||
| CVE-2022-1164 | 1 Wztechno | 1 Wyzi | 2024-11-21 | 6.1 Medium |
| The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature | ||||
| CVE-2022-1163 | 1 Mineweb | 1 Minewebcms | 2024-11-21 | 4.8 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next. | ||||
| CVE-2022-1162 | 1 Gitlab | 1 Gitlab | 2024-11-21 | 9.1 Critical |
| A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowing attackers to potentially take over accounts | ||||
| CVE-2022-1160 | 2 Fedoraproject, Vim | 2 Fedora, Vim | 2024-11-21 | 7.8 High |
| heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647. | ||||
| CVE-2022-1158 | 3 Fedoraproject, Linux, Redhat | 8 Fedora, Linux Kernel, Enterprise Linux and 5 more | 2024-11-21 | 7.8 High |
| A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and potentially corrupt the kernel, resulting in a denial of service condition. | ||||