CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-5104MEDIUM | Improper Input Validation in nocodb/nocodbImproper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0. CWE-20Sep 21, 2023 | CVSS6.5v3.1 | EPSS0.638% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-3423HIGH | Allocation of Resources Without Limits or Throttling in nocodb/nocodbAllocation of Resources Without Limits or Throttling in GitHub repository nocodb/nocodb prior to 0.92.0. | CVSS7.3v3.1 | EPSS1.91% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2339HIGH | Server-Side Request Forgery (SSRF) in nocodb/nocodbWith this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information. CWE-918Jul 7, 2022 | CVSS7.5v3.1 | EPSS1.84% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2079MEDIUM | Cross-site Scripting (XSS) - Stored in nocodb/nocodbCross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+. CWE-79Jun 14, 2022 | CVSS5.4v3.1 | EPSS0.693% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2064HIGH | Insufficient Session Expiration in nocodb/nocodbInsufficient Session Expiration in GitHub repository nocodb/nocodb prior to 0.91.7+. CWE-613Jun 13, 2022 | CVSS8.8v3.1 | EPSS1.19% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2063HIGH | Improper Privilege Management in nocodb/nocodbImproper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+. CWE-269Jun 13, 2022 | CVSS8.8v3.1 | EPSS1.39% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2062HIGH | Generation of Error Message Containing Sensitive Information in nocodb/nocodbGeneration of Error Message Containing Sensitive Information in GitHub repository nocodb/nocodb prior to 0.91.7+. | CVSS7.5v3.1 | EPSS1.45% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2022MEDIUM | Cross-site Scripting (XSS) - Stored in nocodb/nocodbCross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7. CWE-79Jun 7, 2022 | CVSS5.4v3.1 | EPSS0.789% | PoCs27 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |