High
CVE-2022-39248
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2022-39246
matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions
High
CVE-2022-39243
NuProcess vulnerable to command-line injection through insertion of NUL character(s)
High
CVE-2022-39251
matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion
High
CVE-2022-39249
matrix-js-sdk subject to impersonated messages due to permissive key forwarding
Medium
CVE-2022-3326
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.
Medium
CVE-2022-40408
FeehiCMS vulnerable to Cross-Site scripting via crafted payload
Medium
CVE-2021-40691
Moodle Improper Authentication
Medium
CVE-2021-40693
Moodle type juggling vulnerability
Medium
CVE-2021-40692
Moodle Incorrect Authorization
Medium
CVE-2021-40695
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Medium
CVE-2021-40694
Moodle Improper Encoding or Escaping of Output
Medium
CVE-2022-3364
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
High
CVE-2022-41634
Media Library Folders <= 7.1.1 - Cross-Site Request Forgery
High
CVE-2022-27628
WZone - Lite <= 3.1 - Cross-Site Request Forgery
High
CVE-2022-3335
Kadence WooCommerce Email Designer <= 1.5.6 - PHP Object Injection
High
CVE-2022-3097
Plugin LBstopattack <= 1.1.2 - Cross-Site Request Forgery
Medium
8ce4be1b-3807-4ded-80a5-30f2f80db89d
All In One WP Security & Firewall 5.0.0 - 5.0.7 - Protection Bypass via IP Spoofing
Medium
CVE-2022-38467
CRM Perks Forms <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-3350
Contact Bank <= 3.0.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-30544
OSM - OpenStreetMap <= 6.0 - Cross-Site Request Forgery
Unrated
752
jCart for OpenCart - XSS (Cross Site Scripting)
Unrated
754
JoomRecipe - XSS (Cross Site Scripting)
Medium
CVE-2022-39236
Improper beacon events in matrix-js-sdk can result in availability issues
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.