High
CVE-2022-44589
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-45846
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
High
CVE-2022-45850
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
Medium
CVE-2022-45852
WP-FormAssembly <= 2.0.5 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2022-44581
Defender Security <= 3.3.2 - Sensitive Information Disclosure
Medium
CVE-2022-45851
ShareThis Dashboard for Google Analytics <= 3.1.4 - Missing Authorization
High
CVE-2022-45838
ARForms Form Builder <= 1.5.6 - Unauthenticated Cross-Site Scripting
Critical
CVE-2022-4116
Code injection in quarkus dev ui config editor
High
CVE-2022-33012
Account Takeover Through Password Reset Poisoning
Medium
CVE-2022-42097
Cross-site Scripting in Backdrop CMS
Medium
CVE-2022-42094
Cross-site Scripting in Backdrop CMS
High
CVE-2022-41131
OS Command Injection in Apache Airflow
Medium
CVE-2022-40954
OS Command Injection in Apache Airflow
Critical
CVE-2022-38649
OS Command Injection in Apache Airflow
Critical
CVE-2022-40189
OS Command Injection in Apache Airflow
High
CVE-2022-43685
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser account
Medium
CVE-2022-4111
ToolJet is vulnerable to Denial of Service (DoS)
Medium
ghsa-gpv5-rp6w-58r8
Remote code execution vulnerability in dependency System.Drawing.Common
Medium
CVE-2022-41880
Tensorflow vulnerable to Out-of-Bounds Read
Medium
CVE-2022-38145
Stored XSS in Compare Mode
High
CVE-2022-38148
Blind SQL Injection via GridFieldSortableHeader
Medium
CVE-2022-3985
Videojs HTML5 Player <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-44737
All In One WP Security & Firewall <= 5.1.0 - Cross-Site Request Forgery
Critical
CVE-2022-45359
Yith WooCommerce Gift Cards Premium <= 3.19.0 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.