High
CVE-2022-33142
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2022-2941
WP-UserOnline <= 2.88.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2654
Classima < 2.1.11 - Reflected Cross-Site Scripting
Medium
CVE-2022-36282
Search Exclude <= 1.2.6 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2022-2433
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization
High
CVE-2022-35909
Incorrect Access Control and Cross Site Scripting in Jellyfin
High
CVE-2022-36157
Improper Privilege Management in com.xuxueli:xxl-job
Medium
CVE-2022-35692
Magento Open Source has Improper Access Control vulnerability
High
CVE-2022-37422
Path Traversal in Payara
High
CVE-2022-35204
Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
Medium
CVE-2022-35174
Cross site scripting in getkirby/starterkit
Critical
CVE-2022-35540
Use of Hard-coded Credentials in AgileConfig.Client
High
CVE-2022-2912
Craw Data <= 1.0.0 - Server Side Request Forgery
Medium
4f997c20-38f6-4968-b7de-8f28f825c7fd
Social Media Share Buttons <= 3.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-51009
PocketMine-MP invalid skin geometry JSON data leading to server crash
Critical
CVE-2022-36010
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Medium
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Medium
CVE-2022-36007
Venice vulnerable to Partial Path Traversal issue within the functions `load-file` and `load-resource`
Medium
CVE-2022-35943
CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection
Medium
CVE-2022-35948
Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type
Medium
CVE-2022-35954
@actions/core has Delimiter Injection Vulnerability in exportVariable
High
CVE-2022-35961
OpenZeppelin Contracts vulnerable to ECDSA signature malleability
Medium
CVE-2022-35949
`undici.request` vulnerable to SSRF using absolute URL on `pathname`
Medium
ghsa-2fvv-qxrq-7jq6
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.