Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (95398 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-1185 | 1 Gitlab | 1 Gitlab | 2024-11-21 | 6.5 Medium |
| A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 allows an attacker to crash the GitLab web application with a maliciously crafted RDoc file | ||||
| CVE-2022-1181 | 1 Open-emr | 1 Openemr | 2024-11-21 | 5.4 Medium |
| Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2. | ||||
| CVE-2022-1180 | 1 Open-emr | 1 Openemr | 2024-11-21 | 3.5 Low |
| Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. | ||||
| CVE-2022-1179 | 1 Open-emr | 1 Openemr | 2024-11-21 | 5.4 Medium |
| Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. | ||||
| CVE-2022-1178 | 1 Open-emr | 1 Openemr | 2024-11-21 | 5.4 Medium |
| Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. | ||||
| CVE-2022-1175 | 1 Gitlab | 1 Gitlab | 2024-11-21 | 8.7 High |
| Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 allowed an attacker to exploit XSS by injecting HTML in notes. | ||||
| CVE-2022-1173 | 1 Getgrav | 1 Grav | 2024-11-21 | 5.4 Medium |
| stored xss in GitHub repository getgrav/grav prior to 1.7.33. | ||||
| CVE-2022-1171 | 1 Vertical Scroll Recent Post Project | 1 Vertical Scroll Recent Post | 2024-11-21 | 6.1 Medium |
| The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting | ||||
| CVE-2022-1170 | 1 Nootheme | 1 Jobmonster | 2024-11-21 | 6.1 Medium |
| In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests. | ||||
| CVE-2022-1169 | 1 Eyecix | 1 Careerfy | 2024-11-21 | 6.1 Medium |
| There is a XSS vulnerability in Careerfy. | ||||
| CVE-2022-1168 | 1 Eyecix | 1 Jobsearch Wp Job Board | 2024-11-21 | 6.1 Medium |
| There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1. | ||||
| CVE-2022-1167 | 1 Apusthemes | 1 Careerup | 2024-11-21 | 6.1 Medium |
| There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the filter parameters. | ||||
| CVE-2022-1164 | 1 Wztechno | 1 Wyzi | 2024-11-21 | 6.1 Medium |
| The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature | ||||
| CVE-2022-1163 | 1 Mineweb | 1 Minewebcms | 2024-11-21 | 4.8 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next. | ||||
| CVE-2022-1162 | 1 Gitlab | 1 Gitlab | 2024-11-21 | 9.1 Critical |
| A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowing attackers to potentially take over accounts | ||||
| CVE-2022-1160 | 2 Fedoraproject, Vim | 2 Fedora, Vim | 2024-11-21 | 7.8 High |
| heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647. | ||||
| CVE-2022-1156 | 1 Books \& Papers Project | 1 Books \& Papers | 2024-11-21 | 4.8 Medium |
| The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed | ||||
| CVE-2022-1152 | 1 Menubar | 1 Menubar | 2024-11-21 | 5.4 Medium |
| The Menubar WordPress plugin before 5.8 does not sanitise and escape the command parameter before outputting it back in the response via the menubar AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting | ||||
| CVE-2022-1143 | 1 Google | 1 Chrome | 2024-11-21 | 8.8 High |
| Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. | ||||
| CVE-2022-1142 | 1 Google | 1 Chrome | 2024-11-21 | 8.8 High |
| Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. | ||||