Medium
CVE-2022-45402
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-3908
Helloprint <= 1.4.6 - Reflected Cross-Site Scripting
Critical
CVE-2022-45136
Apache Jena vulnerable to Deserialization of Untrusted Data
Critical
CVE-2022-45378
Apache SOAP contains unauthenticated RPCRouterServlet
High
CVE-2022-43693
Concrete CMS vulnerable to Cross-site Request Forgery
High
CVE-2022-27949
A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and prev
High
CVE-2022-40127
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apach
High
CVE-2022-45199
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
High
CVE-2022-45198
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
High
CVE-2022-3677
Advanced Import <= 1.3.7 - Cross-Site Request Forgery
Medium
CVE-2022-2536
Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass
High
CVE-2022-2942
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Cross-Site Request Forgery to Settings update
High
CVE-2022-3747
Becustom <= 1.0.5.2 - Cross-Site Request Forgery
Critical
CVE-2022-3856
Comic Book Management System < 2.2.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-3991
Photospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-3240
Follow Me Plugin <= 3.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-2940
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-3858
Floating Chat Widget - Chaty <= 3.0.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-3978
NodeBB vulnerable to Cross-Site Request Forgery
Medium
CVE-2022-3971
Matrix-appservice-irc vulnerable to sql injection via roomIds argument
Medium
CVE-2022-3975
NukeView CMS vulnerable to Cross-site Scripting
Medium
CVE-2022-3846
Workreap < 2.6.3 - Insecure Direct Objection Reference to Private Message Disclosure
High
CVE-2022-41905
Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled
Medium
CVE-2022-41854
Snakeyaml vulnerable to Stack overflow leading to denial of service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.