Unrated
drupal-contrib-2022-015
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Unrated
drupal-contrib-2022-013
drupal/business_responsive_theme - SA-CONTRIB-2022-013
Unrated
drupal-contrib-2022-012
drupal/swiftype - SA-CONTRIB-2022-012
Unrated
drupal-contrib-2022-009
drupal/expire_reset_pass_link - SA-CONTRIB-2022-009
Unrated
drupal-contrib-2022-008
drupal/admin_toolbar_search - SA-CONTRIB-2022-008
Unrated
drupal-contrib-2022-006
drupal/tac_lite - SA-CONTRIB-2022-006
Unrated
drupal-contrib-2022-005
drupal/anonymousredirect - SA-CONTRIB-2022-005
Medium
CVE-2022-0083
User enumeration in livehelperchat
High
ghsa-44m4-9cjp-j587
IBX-1392: Image filenames sanitization
Medium
CVE-2022-51016
Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP
High
CVE-2022-51014
Unhandled exception when decoding form response JSON
Medium
ghsa-7v3x-h7r2-34jv
Insufficient Session Expiration in Pterodactyl API
High
CVE-2021-32650
october/system arbitrary code execution
High
CVE-2021-32649
October/System authenticated file write leads to remote code execution
High
CVE-2022-51015
Unchecked validity of Facing values in PlayerActionPacket
Medium
ghsa-rrgw-3hg3-9x8c
XSS vulnerability in translations
High
CVE-2022-22111
Missing Authorization in DayByDay CRM
High
CVE-2022-51017
Uncapped length of skin data fields submitted by players
Medium
CVE-2022-51018
Book page text, count, and author/title length is not limited in PocketMine-MP
Medium
CVE-2022-21651
Open redirect in shopware
High
CVE-2022-21647
Deserialization of Untrusted Data in Codeigniter4
Medium
CVE-2022-0079
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
Critical
CVE-2021-23803
Incorrect Authorization in latte/latte
Medium
CVE-2021-41236
XSS vulnerability on email template preview page
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.