Medium
CVE-2022-4363
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
90c0e937-19fd-484e-a50f-42b00a6eeb30
Moosend Website Connector <= 1.0.189 - Missing Authorization
Medium
CVE-2022-4329
Product list Widget for Woocommerce <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2022-23487
libp2p DoS vulnerability from lack of resource management
Medium
CVE-2022-23491
Certifi removing TrustCor root certificate
Critical
CVE-2022-46742
PaddlePaddle vulnerable to Code Injection
Medium
CVE-2022-41994
baserCMS vulnerable to stored Cross-site Scripting
Medium
CVE-2022-42486
baserCMS vulnerable to stored Cross-site Scripting
Medium
CVE-2022-4200
Login with Cognito <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
c4039a27-0100-49c5-8dce-cf015a08ef04
ContentStudio <= 1.1.8 - Missing Authorization
Medium
CVE-2022-45814
WP Calendar <= 1.5.3 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-38055
wpForo Forum <= 2.0.9 - Authenticated (Subscriber+) HTML Injection
Medium
CVE-2022-4340
BookingPress <= 1.0.30 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2022-45817
GC Testimonials <= 1.3.2 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-4198
WP Social Sharing <= 2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-44595
WP 2FA – Two-factor authentication for WordPress <= 2.2.0 - Missing Authorization
Medium
CVE-2022-4306
Panda Pods Repeater Field <= 1.5.3 - Reflected Cross-Site Scripting
High
CVE-2022-4147
Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed
Critical
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
Medium
ghsa-vx2x-9cff-fhjw
DSInternals Credential Roaming Elevation of Privilege Vulnerability
High
CVE-2022-44289
Thinkphp has a code logic error
High
CVE-2022-23472
Passeo uses insecure random number generator
Critical
CVE-2022-24439
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone
Medium
CVE-2022-43556
Concrete CMS vulnerable to cross-site scripting in the text input field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.