Medium
CVE-2022-37724
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2022-40734
UniSharp Laravel Filemanager directory traversal vulnerability
Medium
CVE-2022-3220
Advanced Comment Form <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-40193
Awesome Filterable Portfolio <= 1.9.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-40672
CPO Shortcodes <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-35238
Awesome Filterable Portfolio <= 1.9.7 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-40213
GS Testimonial Slider <= 1.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-3227
SearchWP Live Ajax Search <= 1.6.2 - Directory Traversal and Local File Inclusion
Medium
CVE-2022-3137
Taskbuilder <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2022-36436
VNCAuthProxy authentication bypass vulnerability
High
CVE-2022-1278
WildFly vulnerable to Insecure Default Initialization of Resource
High
CVE-2022-40634
CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources
High
CVE-2022-40635
CrafterCMS OS Command Injection vulnerability
Medium
CVE-2022-38497
LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.
Medium
CVE-2022-38307
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
High
CVE-2022-38495
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
Medium
CVE-2022-38306
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.
Medium
CVE-2021-36568
Moodle Cross-site Scripting vulnerability
High
CVE-2022-3154
Multiple Plugins from Viszt Peter - Cross-Site Request Forgery
Medium
CVE-2022-2554
Enable Media Replace <= 3.6.3 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2022-2350
Disable User Login <= 1.0.1 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2022-40671
Rate my Post – WP Rating System <= 3.3.4 - Cross-Site Request Forgery
High
CVE-2022-29489
Sucuri Security <= 1.8.33 - Cross-Site Request Forgery
Medium
CVE-2022-2823
Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin <= 3.27.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.