Medium
505edcf7-7015-453e-abd2-e2cd68a3a9f6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
42c38563-ed78-4e65-8d1f-b3aa6444923d
Related Posts for WordPress <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-3393
Post to CSV by BestWebSoft <= 1.3.8 - Authenticated (Author+) CSV Injection
Medium
CVE-2022-3247
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2022-3401
Bricks 1.2 - 1.5.3 - Remote Code Execution
High
CVE-2022-3302
AntiSpam by CleanTalk <= 5.185 - Authenticated (Administrator+) SQL Injection
Medium
057a440e-4917-45c5-90ab-bb8654eae68f
Quick Restaurant Menu <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-38086
Shortcodes Ultimate <= 5.12.0 - Cross-Site Request Forgery
Medium
CVE-2022-2922
DNN vulnerable to Relative Path Traversal
High
CVE-2022-21222
css-what vulnerable to ReDoS due to use of insecure regular expression
High
CVE-2022-24373
react-native-reanimated vulnerable to ReDoS
High
CVE-2022-3371
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
High
CVE-2022-40277
Joplin Remote Code Execution
Critical
CVE-2022-40315
Moodle Minor SQL injection risk in admin user browsing
Critical
CVE-2022-40314
Moodle remote code execution
High
CVE-2022-40313
Moodle Stored Cross-site Scripting and page denial of service
Medium
CVE-2022-40316
Moodle No groups filtering in H5P activity attempts report
Unrated
756
JKassa - SQL Injection
Critical
CVE-2022-39266
isolated-vm has vulnerable CachedDataOptions in API
High
CVE-2022-39250
matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification
Medium
CVE-2022-40923
LIEF vulnerable to denial of service through segmentation fault
Medium
CVE-2022-39263
Upstash Adapter missing token verification
Critical
CVE-2022-39256
Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.
High
ghsa-f36p-42jv-8rh2
Lithium vulnerable to Cross Site Scripting in provided Swagger-UI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.