Medium
CVE-2022-3026
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2022-2934
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Image URL
High
7082c181-88c7-40f0-b49c-ffc16ab41dcc
Zephyr Project Manager <= 3.2.42 - Missing Authorization to Cross-Site Scripting
Medium
CVE-2022-3036
Gettext override translations <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2430
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block'
Medium
CVE-2022-2517
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Caption - On Hover
Medium
2ff83bf5-369f-43b9-b073-daf0de9051c7
Zephyr Project Manager <= 3.2.42 - Reflected Cross-Site Scripting
Medium
CVE-2022-2516
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title'
Medium
CVE-2022-2429
Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection
Medium
CVE-2022-2567
Form Builder CP <= 1.2.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2716
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Text Editor
Medium
CVE-2022-37412
Better Delete Revision <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-38792
exotel-py includes code execution backdoor inserted by a third party
Critical
CVE-2022-24304
Mongoose Vulnerable to Prototype Pollution in Schema Object
Low
CVE-2021-3644
wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault
Medium
CVE-2021-3856
Keycloak has Files or Directories Accessible to External Parties
High
CVE-2021-3632
Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow
High
CVE-2022-0084
XNIO `notifyReadClosed` method logging message to unexpected end
Medium
CVE-2022-0225
Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown
Critical
CVE-2021-3563
Openstack Keystone Incorrect Authorization vulnerability
High
Exploited in attacks
CVE-2022-36537
ZK Framework vulnerable to malicious POST
Unrated
pysec-2022-252
The deep-translator project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and download
Unrated
pysec-2022-251
The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran
Unrated
pysec-2022-250
The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ra
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.