High
CVE-2022-25275
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
Medium
CVE-2022-2400
Dompdf before v2.0.0 vulnerable to chroot check bypass
Medium
ghsa-q37h-jhf3-85cj
Bypass of CMS Safe Mode Security Feature
High
CVE-2022-31158
LTI 1.3 Tool Library's Nonce Claim Value not validated against nonce value sent in Authentication Request before v5.0
High
CVE-2022-31157
LTI 1.3 Tool Library's function used to generate random nonces not sufficiently cryptographically complex before v5.0
Medium
ghsa-6f85-3f8q-qc94
OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor
Critical
CVE-2022-35628
SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
High
CVE-2022-24800
October CMS upload process vulnerable to RCE via Race Condition
Unrated
drupal-contrib-2022-048
drupal/entity_print - SA-CONTRIB-2022-048
Medium
CVE-2022-33155
Cross site scripting in ameos_tarteaucitron
Medium
CVE-2022-33157
libconnect Extension for Typo3 Vulnerable to XSS
High
CVE-2022-31140
Valinor error messages leading to potential data exfiltration before v0.12.0
Medium
CVE-2022-2368
Microweber before 1.2.21 allows attacker to bypass IP detection to brute-force password
Medium
CVE-2022-2353
Microweber before v1.2.20 vulnerable to cross-site scripting
High
CVE-2022-33011
Known vulnerable to account takeover via host header injection attack in v1.3.1
Medium
CVE-2022-30852
Known v1.3.1 contains Insecure Direct Object Reference
Medium
CVE-2022-32115
Known vulnerable to code execution via SVG file in v1.3.1
Medium
CVE-2022-31290
Known v1.3.1 Cross-site Scripting
Medium
CVE-2022-32061
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
Medium
CVE-2022-32060
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
Medium
CVE-2022-2300
Cross-site Scripting in microweber
Medium
CVE-2022-2280
Cross-site Scripting in microweber
Critical
CVE-2022-33107
Deserialization of Untrusted Data in topthink/framework
Medium
CVE-2022-2252
Open Redirect in microweber
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.