High
CVE-2022-2073
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
Medium
CVE-2022-29858
Unpublished, protected files can be published via shortcode
Medium
CVE-2021-41559
Quadratic blowup in Convert::xml2array()
Medium
CVE-2022-25238
Stored XSS via HTML fields in SilverStripe Framework
Medium
CVE-2022-28803
Stored XSS in link tags added via XHR in SilverStripe Framework
Medium
CVE-2022-24444
Hybridsessions does not expire session id on logout
Unrated
drupal-contrib-2022-047
drupal/config_terms - SA-CONTRIB-2022-047
Unrated
drupal-contrib-2022-046
drupal/lottiefiles_field - SA-CONTRIB-2022-046
Medium
CVE-2022-23896
Cross-site Scripting in admidio
Medium
CVE-2022-0085
Server-Side Request Forgery in dompdf/dompdf
Low
CVE-2022-30120
Cross site scripting in Concrete CMS
Critical
CVE-2022-30117
Path traversal in Concrete CMS
High
CVE-2022-21829
Code injection in concrete CMS
Medium
CVE-2022-33910
MantisBT XSS through crafted SVG documents in file_download.php
High
CVE-2022-31101
Invalid order neutralization in an SQL query in PrestaShop blockwishlist module
Medium
CVE-2022-2174
Cross-site Scripting in Microweber
High
CVE-2022-31092
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Medium
CVE-2022-31057
Authenticated Stored Cross-site Scripting in Shopware
Medium
CVE-2022-30874
Cross-site Scripting in NukeViet CMS
Medium
CVE-2021-41924
Cross-site Scripting in krayin/laravel-crm
High
CVE-2022-31091
Change in port should be considered a change in origin
High
CVE-2017-20064
Code injection in Elefant CMS
High
CVE-2017-20063
Unrestricted Upload of File with Dangerous Type in Elefant CMS
High
CVE-2017-20062
Cross-Site Request Forgery in Elefant CMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.