Critical
2637e273-a308-4033-be5a-2f778f8df282
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2022-3171
protobuf-java has a potential Denial of Service issue
High
CVE-2022-36551
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the syst
High
CVE-2022-40764
Snyk CLI affected by Command Injection vulnerability
Medium
CVE-2022-32173
OrchardCore vulnerable to HTML injection
Medium
dd108f90-7afc-43e1-86d4-939c1c25fb2d
IP Blacklist Cloud <= 5.00 - Reflected Cross-Site Scripting
Critical
c5c17dea-7b61-4e73-ac61-3fe536c22962
WooCommerce Products Vendor <= 2.1.65 - Unauthenticated SQL Injection
Medium
CVE-2022-36428
Rock Convert <= 2.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
a8b0bad8-7ee6-4c7c-95da-7adf37c9cb1f
WooCommerce Products Vendor <= 2.1.68 - Insecure Direct Object Reference to Vendor Commission Percentage Update
Medium
CVE-2022-3392
WP Humans.txt <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
57465fce-e8ad-41ac-9dd6-e340ec314913
WooCommerce Products Vendor <= 2.1.65 - Insecure Direct Object Reference to Note Creation
Medium
475ca301-32f2-4913-925c-369a9a4c83c1
Table Generator <= 1.3.0 - Missing Authorization to Table Modification
Medium
CVE-2022-33978
FontMeister <= 1.08 - Reflected Cross-Site Scripting
High
CVE-2022-40922
LIEF vulnerable to denial of service through segmentation fault
High
CVE-2022-42003
Uncontrolled Resource Consumption in Jackson-databind
High
CVE-2022-42004
Uncontrolled Resource Consumption in FasterXML jackson-databind
Critical
CVE-2022-3360
LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection
Medium
edf0760c-356a-4c55-9ccc-9f086dae12b6
Casso – Tự động xác nhận thanh toán chuyển khoản ngân hàng <= 2.8.6 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2022-3395
WP ALL Export Pro <= 1.7.8 - Authenticated SQL Injection
High
CVE-2022-3394
WP ALL Export Pro <= 1.7.8 - Authenticated Remote Code Execution
Medium
CVE-2022-3400
Bricks 1.0 - 1.5.3 - Missing Authorization to Arbitrary Content Creation/Modification
High
CVE-2022-3246
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-3391
Retain Live Chat <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
50c8a20a-66b4-445e-9167-e6fc0e6a1000
BuddyForms Moderation <= 1.4.16 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.