High
CVE-2022-36034
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2022-35933
PrestaShop Product Comments Cross-site Scripting vulnerability
High
CVE-2022-25857
Uncontrolled Resource Consumption in snakeyaml
High
CVE-2022-25887
Sanitize-html Vulnerable To REDoS Attacks
Medium
CVE-2022-25646
x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting
Medium
CVE-2022-36746
LibreNMS vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2022-36745
LibreNMS vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2022-2935
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL
Medium
CVE-2022-3024
Bitcoin Satoshi Tools <= 1.7.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2022-1613
Restricted Site Access <= 7.3.1 - Access Bypass via IP Spoofing
Medium
CVE-2022-36422
WP-PostRatings <= 1.89 - Race Condition
Medium
CVE-2022-3069
Wordlift <= 3.37.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-37404
add2fav <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-36793
WP Shop <= 3.9.6 - Missing Authentication to Settings Change and Order Deletion
Medium
CVE-2022-2936
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link
Medium
4f1cf0f3-faf2-43f7-a641-95bfa5d73ca8
Infinite Scroll – Ajax Load More <= 5.5.4 - Authenticated (Admin+) Arbitrary File Read via Directory Traversal
Medium
CVE-2022-3070
Generate PDF using Contact Form 7 <= 3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-3025
Bitcoin / Altcoin Faucet <= 1.6.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-2937
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description
Medium
ghsa-8mgq-6r2q-82w9
Captcha Bypass in strapi-plugin-ezforms
High
ghsa-rv3r-vqjj-8c76
Cross-site scripting from content entered in the tags and multiselect fields
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Critical
CVE-2022-36045
Cryptographically weak PRNG in `utils.generateUUID`
Low
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.