High
CVE-2022-3952
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-41892
Arches vulnerable to execution of arbitrary SQL
High
CVE-2022-26366
AdRotate Banner Manager <= 5.9 - Cross-Site Request Forgery
Medium
CVE-2022-44630
YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery
Medium
CVE-2022-3922
Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45075
Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization
High
CVE-2022-1540
PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2022-44736
Chameleon <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
b948574a-0aab-4596-83e6-04be21f78bc1
YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization
Medium
CVE-2022-45081
Add Multiple Marker <= 1.2 - Missing Authorization Checks to Settings Update
High
CVE-2022-45080
Add Multiple Marker <= 1.2 - Cross-Site Request Forgery
High
CVE-2022-45074
Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery
Critical
ghsa-99r3-xmmq-7q7g
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-8h83-chh2-fchp
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-446q-xxg5-3vhh
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-pcpm-vc4v-cmvx
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-g6jc-xrc3-4wwq
Ibexa DXP users with the Company admin role can assign any role to any user
Critical
ghsa-394j-x37r-2q27
Ibexa DXP users with the Company admin role can assign any role to any user
Critical
ghsa-7644-cxp8-h23r
ibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortname
High
CVE-2022-41876
ezplatform-graphql GraphQL queries can expose password hashes
Critical
ghsa-58h5-h554-429q
ezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS)
Critical
ghsa-3p7g-wrgg-wq45
GraphQL queries can expose password hashes
Medium
CVE-2022-36022
Use of unclaimed s3 bucket in tests and examples
Medium
ghsa-98pf-gfh3-x3mp
Read the Docs vulnerable to Cross-Site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.