Medium
342d90e1-9d2e-4262-9667-013a8506727b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Medium
CVE-2022-2543
Visual Portfolio, Photo Gallery & Post Grid <= 2.17.1 - Unauthenticated CSS Injection
Medium
CVE-2022-2597
Visual Portfolio, Photo Gallery & Post Grid <= 2.18.0 - Contributor+ CSS Injection
Medium
66519150-7719-4598-8302-b3437719f0a0
All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting
High
4752b3a7-dbb0-4326-bfff-b94dd55b4bf1
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion
Medium
370e816c-920a-4e53-a2f8-afe2806c9df3
Fast Flow <= 1.2.11 - Reflected Cross-Site Scripting
Medium
2a4d8b76-8fb0-4239-ac4b-4ef4428be02b
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-35916
OpenZeppelin Contracts's Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls
Medium
CVE-2022-35915
OpenZeppelin Contracts ERC165Checker unbounded gas consumption
Medium
CVE-2022-38180
JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider
Medium
CVE-2022-38179
JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack
Medium
CVE-2022-2390
Google Play Services SDK leads to apps having incorrectly set mutability flag
Medium
CVE-2022-35589
ForkCMS XSS via `publish_on_time` parameter
Medium
CVE-2022-35587
ForkCMS XSS via `publish_on_date` parameter
Medium
CVE-2022-35590
ForkCMS XSS via `end_date` parameter
Medium
CVE-2022-35585
ForkCMS stored XSS via `start_date` parameter
Medium
e3702936-9ae2-4efb-bdfe-9e1dfceb246b
Protect uploads <= 0.3 - Authorization Bypass
High
CVE-2022-35980
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
Medium
CVE-2022-37423
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
Medium
CVE-2022-2777
Microweber's title parameter in the body of POST request vulnerable to stored XSS
High
CVE-2022-29476
Notification Bar for WordPress <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-36347
Alpine PhotoTile for Pinterest <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-34648
Uploading SVG, WEBP and ICO files <= 1.0.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-35242
THE Leads Management System: 59sec LITE <= 3.4.1 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.