Medium
7d047fe7-bf00-4f93-91d2-c5da41664bfc
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-40206
wpForo Forum <= 2.0.5 - Insecure Direct Object Reference to Forum Privacy Change
Critical
CVE-2022-45907
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
Medium
CVE-2022-45844
Organization chart <= 1.4.1 - Missing Authorization
High
CVE-2022-4972
Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
High
CVE-2022-3994
Authenticator <= 1.3.0 - Missing Authorization
High
61992821-a053-4bc6-853a-1a826d096746
Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery
Medium
5cc590fe-94c8-47cc-bd5b-eef70da138b1
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.7 - Open Redirect
High
1647ac13-d9d1-46ae-93e7-855f55160e03
Organization chart <= 1.4.1 - Cross-Site Request Forgery
Critical
CVE-2022-45152
Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library
Low
CVE-2022-41954
Temporary File Information Disclosure vulnerability in MPXJ
Critical
CVE-2022-45206
Jeecg-boot vulnerable to SQL Injection
Medium
CVE-2022-45210
Jeecg-boot vulnerable to SQL Injection
Critical
CVE-2022-45207
Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString
Medium
CVE-2022-45208
Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin
Medium
CVE-2022-43983
Browsershot vulnerable to Cross-Site Scripting (XSS)
High
CVE-2022-41706
Browsershot does not validate URL protocols passed to Browsershot URL method
Critical
CVE-2022-41705
Badaso vulnerable to Remote Code Execution (RCE)
Medium
CVE-2022-43984
Browsershot version 3.57.3 vulnerable to improper input validation
Medium
CVE-2022-0698
Microweber vulnerable to cross-site scripting (XSS)
Critical
CVE-2022-37721
PyroCMS vulnerable to stored Cross Site Scripting
Critical
Exploited in attacks
CVE-2022-4135
Heap buffer overflow in GPU
Medium
CVE-2022-44735
WP Clictracker <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
80b5ca3d-d651-4c8a-8c64-6938d4a03710
Kenta Gutenberg Blocks <= 1.0.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.