Vendor CVEs
GitHub
All CVEs
586 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-2260 | Hig | 0.00 | 8.8 | 0.01 | Apr 24, 2023 | Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. | ||
| CVE-2023-2259 | Hig | 0.00 | 7.2 | 0.01 | Apr 24, 2023 | Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. | ||
| CVE-2023-2258 | Hig | 0.00 | 8.8 | 0.01 | Apr 24, 2023 | Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. | ||
| CVE-2023-2109 | Med | 0.00 | 6.1 | 0.00 | Apr 17, 2023 | Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0. | ||
| CVE-2023-26485 | Med | 0.00 | 5.3 | 0.01 | Mar 31, 2023 | cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing… | ||
| CVE-2023-24824 | Med | 0.00 | 5.3 | 0.01 | Mar 31, 2023 | cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing… | ||
| CVE-2023-1665 | Cri | 0.00 | 9.8 | 0.01 | Mar 27, 2023 | Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0. | ||
| CVE-2023-1527 | Med | 0.00 | 5.4 | 0.01 | Mar 21, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0. | ||
| CVE-2023-1362 | Med | 0.00 | 6.1 | 0.01 | Mar 13, 2023 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2. | ||
| CVE-2023-1361 | Med | 0.00 | 6.5 | 0.01 | Mar 13, 2023 | SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2. | ||
| CVE-2023-1320 | Med | 0.00 | 6.1 | 0.01 | Mar 10, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. | ||
| CVE-2023-1319 | Med | 0.00 | 4.8 | 0.00 | Mar 10, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. | ||
| CVE-2023-1317 | Med | 0.00 | 5.4 | 0.01 | Mar 10, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. | ||
| CVE-2023-1316 | Med | 0.00 | 5.4 | 0.01 | Mar 10, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. | ||
| CVE-2023-1315 | Med | 0.00 | 5.4 | 0.01 | Mar 10, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. | ||
| CVE-2023-1270 | Med | 0.00 | 5.4 | 0.00 | Mar 8, 2023 | Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3. | ||
| CVE-2023-1181 | Med | 0.00 | 5.4 | 0.00 | Mar 5, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7. | ||
| CVE-2023-1149 | Med | 0.00 | 5.4 | 0.01 | Mar 2, 2023 | Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0. | ||
| CVE-2023-1148 | Med | 0.00 | 4.8 | 0.01 | Mar 2, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. | ||
| CVE-2023-1146 | Med | 0.00 | 5.4 | 0.00 | Mar 2, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3. | ||
| CVE-2023-1107 | Med | 0.00 | 5.4 | 0.01 | Mar 2, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. | ||
| CVE-2023-1106 | Med | 0.00 | 6.1 | 0.01 | Mar 2, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3. | ||
| CVE-2023-1105 | Hig | 0.00 | 8.1 | 0.01 | Mar 1, 2023 | External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3. | ||
| CVE-2023-1104 | Med | 0.00 | 5.4 | 0.01 | Mar 1, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. | ||
| CVE-2023-0995 | Med | 0.00 | 5.4 | 0.00 | Feb 24, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1. | ||
| CVE-2023-0947 | Cri | 0.00 | 9.8 | 0.04 | Feb 22, 2023 | Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3. | ||
| CVE-2023-0919 | Hig | 0.00 | 8.1 | 0.00 | Feb 19, 2023 | Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0. | ||
| CVE-2023-0879 | Med | 0.00 | 6.3 | 0.00 | Feb 17, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12. | ||
| CVE-2023-22490 | Med | 0.00 | 5.5 | 0.01 | Feb 14, 2023 | Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though… | ||
| CVE-2023-0810 | Med | 0.00 | 5.4 | 0.01 | Feb 13, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11. | ||
| CVE-2023-0747 | Med | 0.00 | 5.5 | 0.00 | Feb 8, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6. | ||
| CVE-2023-0677 | Med | 0.00 | 6.1 | 0.00 | Feb 4, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1. | ||
| CVE-2023-0676 | Med | 0.00 | 6.1 | 0.02 | Feb 4, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1. | ||
| CVE-2023-0642 | Med | 0.00 | 6.5 | 0.00 | Feb 2, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0. | ||
| CVE-2023-0607 | Med | 0.00 | 4.8 | 0.01 | Feb 1, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository projectsend/projectsend prior to r1606. | ||
| CVE-2023-0606 | Med | 0.00 | 6.1 | 0.01 | Feb 1, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7. | ||
| CVE-2023-0338 | Med | 0.00 | 6.1 | 0.00 | Jan 17, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch. | ||
| CVE-2023-0337 | Med | 0.00 | 6.1 | 0.00 | Jan 17, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch. | ||
| CVE-2023-0301 | Med | 0.00 | 5.4 | 0.00 | Jan 14, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301. | ||
| CVE-2023-0289 | Med | 0.00 | 5.4 | 0.01 | Jan 13, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master. | ||
| CVE-2019-25084 | Low | 0.00 | 3.5 | 0.01 | Dec 25, 2022 | A vulnerability, which was classified as problematic, has been found in Hide Files on GitHub up to 2.x. This issue affects the function addEventListener of the file extension/options.js. The manipulation leads to cross site scripting. The attack may be initiated remotely.… | ||
| CVE-2022-4665 | Hig | 0.00 | 8.8 | 0.01 | Dec 23, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6. | ||
| CVE-2022-4630 | Med | 0.00 | 5.3 | 0.01 | Dec 21, 2022 | Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master. | ||
| CVE-2022-4614 | Med | 0.00 | 5.4 | 0.00 | Dec 19, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository alagrede/znote-app prior to 1.7.11. | ||
| CVE-2022-4605 | Med | 0.00 | 5.4 | 0.01 | Dec 18, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. | ||
| CVE-2022-4502 | Med | 0.00 | 6.1 | 0.01 | Dec 15, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2. | ||
| CVE-2022-4414 | Med | 0.00 | 6.1 | 0.00 | Dec 12, 2022 | Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13. | ||
| CVE-2022-4413 | Med | 0.00 | 6.1 | 0.01 | Dec 12, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13. | ||
| CVE-2022-4366 | Hig | 0.00 | 7.5 | 0.01 | Dec 8, 2022 | Missing Authorization in GitHub repository lirantal/daloradius prior to master branch. | ||
| CVE-2022-4271 | Med | 0.00 | 5.4 | 0.01 | Dec 2, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4. |
- risk 0.00cvss 8.8epss 0.01
Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
- risk 0.00cvss 7.2epss 0.01
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
- risk 0.00cvss 8.8epss 0.01
Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
- risk 0.00cvss 6.1epss 0.00
Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.14.0.
- risk 0.00cvss 5.3epss 0.01
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing…
- risk 0.00cvss 5.3epss 0.01
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing…
- risk 0.00cvss 9.8epss 0.01
Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
- risk 0.00cvss 6.1epss 0.01
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.
- risk 0.00cvss 6.5epss 0.01
SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.
- risk 0.00cvss 6.1epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.
- risk 0.00cvss 4.8epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.
- risk 0.00cvss 5.4epss 0.00
Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3.
- risk 0.00cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.
- risk 0.00cvss 5.4epss 0.01
Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0.
- risk 0.00cvss 4.8epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
- risk 0.00cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
- risk 0.00cvss 6.1epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3.
- risk 0.00cvss 8.1epss 0.01
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
- risk 0.00cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1.
- risk 0.00cvss 9.8epss 0.04
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.
- risk 0.00cvss 8.1epss 0.00
Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0.
- risk 0.00cvss 6.3epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12.
- risk 0.00cvss 5.5epss 0.01
Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though…
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11.
- risk 0.00cvss 5.5epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.
- risk 0.00cvss 6.1epss 0.00
Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to v1.5.1.
- risk 0.00cvss 6.1epss 0.02
Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.
- risk 0.00cvss 6.5epss 0.00
Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0.
- risk 0.00cvss 4.8epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository projectsend/projectsend prior to r1606.
- risk 0.00cvss 6.1epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.
- risk 0.00cvss 6.1epss 0.00
Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
- risk 0.00cvss 6.1epss 0.00
Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.
- risk 0.00cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.
- risk 0.00cvss 3.5epss 0.01
A vulnerability, which was classified as problematic, has been found in Hide Files on GitHub up to 2.x. This issue affects the function addEventListener of the file extension/options.js. The manipulation leads to cross site scripting. The attack may be initiated remotely.…
- risk 0.00cvss 8.8epss 0.01
Unrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.
- risk 0.00cvss 5.3epss 0.01
Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.
- risk 0.00cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository alagrede/znote-app prior to 1.7.11.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
- risk 0.00cvss 6.1epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.
- risk 0.00cvss 6.1epss 0.00
Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.
- risk 0.00cvss 6.1epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13.
- risk 0.00cvss 7.5epss 0.01
Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.
- risk 0.00cvss 5.4epss 0.01
Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4.
Page 10 of 12