High
CVE-2022-36285
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Medium
CVE-2022-36376
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
Critical
CVE-2022-35942
loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter
High
ghsa-pcjh-6r5h-r92r
django-sendfile2 before 0.7.0 contains reflected file download vulnerability
Medium
ghsa-7r9x-qrpr-3cxw
mofh Vulnerable to Improper Restriction of XML External Entity Reference
Medium
CVE-2022-35697
AEM WCM Core Components CVG Image vulnerable to Reflected Cross-site Scripting
High
CVE-2022-25973
mc-kill-port vulnerable to Arbitrary Command Execution via kill function
High
CVE-2022-2450
reSmush.it <= 0.4.3 - Missing Authorization
Unrated
drupal-contrib-2022-052
drupal/jquery_ui_checkboxradio - SA-CONTRIB-2022-052
Medium
CVE-2022-34857
SP Project & Document Manager <= 4.59 - Reflected Cross-Site Scripting
Critical
CVE-2022-25907
ts-deepmerge before 2.0.2 vulnerable to Prototype Pollution
Medium
cffe745d-2fe2-4959-9641-9a0ae33bff4c
Simple Payment Donations <= 4.2.0 - Reflected Cross-Site Scripting
Critical
CVE-2022-33900
Easy Digital Downloads <= 3.0.1 - PHP Object Injection
High
CVE-2022-2442
Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization
High
CVE-2022-2376
Directorist <= 7.3.0 - Sensitive Information Disclosure
High
CVE-2022-2565
Simple Payment Donations <= 4.2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
9ab22aa8-399f-449b-83cf-25583c057cff
SP Project & Document Manager <= 4.59 - Reflected Cross-Site Scripting
Medium
CVE-2022-37407
Gallery PhotoBlocks <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
8d65b779-717b-4efc-b13d-acdf83ca1e63
Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting
High
CVE-2022-36292
Gallery PhotoBlocks <= 1.2.8 - Cross-Site Request Forgery
Medium
CVE-2022-36341
AS – Create Pinterest Pinboard Pages <= 1.0 - Authenticated Options Change to Stored Cross-Site Scripting
High
CVE-2022-36124
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14
Critical
CVE-2022-2713
Cockpit before 2.2.0 vulnerable to Insufficient Session Expiration
High
CVE-2022-36394
Contest Gallery <= 17.0.4 - Authenticated (Author+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.