Medium
bdb8cb7f-38fc-41d7-aa78-abe11c6402b6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
High
CVE-2022-2441
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution
High
CVE-2022-3463
Contact Form Plugin by FluentForm <= 4.3.12 - CSV Injection
High
84c4e3cc-1f7c-4ed9-9072-32f3e84419c9
Booking Calendar – Event Calendar <= 1.0.2 - Missing Authorization
Critical
CVE-2022-3536
Role Based Pricing for WooCommerce <= 1.6.2 - Missing Authorization to PHAR Deserialization
High
CVE-2022-3537
Role Based Pricing for WooCommerce <= 1.6.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2022-3494
Complianz Free <= 6.3.3 & Premium <= 6.3.5 - SQL Injection via Translations
Medium
56abcad2-5be0-422c-a33f-91bc123364e5
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting
High
CVE-2022-3558
Import and export users and customers <= 1.20.4 - Authenticated (Subscriber+) CSV Injection
High
CVE-2022-3489
WP Hide <= 0.0.2 - Missing Authorization to Settings Update
Medium
CVE-2022-2711
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal
High
CVE-2022-3451
Product Stock Manager < 1.0.5 - Missing Authorization and Cross-Site Request Forgery
High
0593311a-54d7-42b2-ad5e-185938b42452
Portfolio Gallery <= 1.0 - Missing Authorization
High
CVE-2022-41323
In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular
Medium
CVE-2022-35689
Magento Open Source allows Improper Access Control
High
CVE-2022-35698
Magento Open Source allows Stored Cross-Site Scripting (Stored XSS)
Critical
CVE-2022-3439
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Critical
CVE-2022-3456
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Critical
CVE-2022-3457
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.
Critical
CVE-2022-37602
Grunt-karma vulnerable to prototype pollution
High
CVE-2022-35944
October CMS Safe Mode bypass leads to authenticated Remote Code Execution
Critical
CVE-2022-42889
Arbitrary code execution in Apache Commons Text
Medium
CVE-2022-3462
Highlight Focus <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-41656
Account Manager for WooCommerce <= 2.1.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.