Medium
88f447d5-990f-4d86-93a3-fd11b63af408
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Critical
3dd08e56-0425-4711-87f1-39625f0ffae2
Mobile Assistant Connector <= 2.2.2 - SQL Injection
Medium
CVE-2022-31175
CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
Medium
CVE-2022-35918
Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custom components are vulnerable to a directory traversal attack that could leak data
High
CVE-2022-31197
PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names
High
CVE-2022-31195
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
High
CVE-2022-31194
JSPUI vulnerable to path traversal in submission (resumable) upload
High
CVE-2022-31193
JSPUI's controlled vocabulary feature vulnerable to Open Redirect before v6.4 and v5.11
High
CVE-2022-31192
JSPUI Possible Cross Site Scripting in "Request a Copy" Feature
High
CVE-2022-31191
JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting
Medium
CVE-2022-31190
XMLUI's metadata of withdrawn Items is exposed to anonymous users
Medium
CVE-2022-31189
JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization
Medium
CVE-2022-35917
Solana Pay Vulnerable to Weakness in Transfer Validation Logic
Low
CVE-2022-31186
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
Low
CVE-2022-35921
Byobu user preference to prevent private discussions being started are not respected
Critical
CVE-2022-21186
@acrontum/filesystem-template vulnerable to Command Injection due to fetchRepo API missing sanitization
Medium
CVE-2020-1691
Moodle XSS Vulnerability
High
CVE-2022-2053
Undertow vulnerable to Dos via Large AJP request
High
b49ae7fc-e860-4387-b596-12640ec7277f
WPCafe – Food Menu, WooCommerce Food Ordering, Food Delivery, Pickup and Restaurant Reservation <= 2.1.4 - Cross-Site Scripting
Medium
afc9114b-80b7-4caf-ab6b-35747ff5057b
Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure
Medium
a2c5e232-3561-43a1-bdfa-4a68f20b5889
Frontend File Manager & Sharing – User Private Files <= 1.1.1 - Missing Authorization
High
49e4dc41-dd5a-4689-9818-e742d1def2f0
WordPress HTTPS (SSL) <= 3.4.0 - Missing Authorization to Settings Change
High
CVE-2022-34158
Apache JSPWiki CSRF due to crafted invocation on the Image plugin
Medium
CVE-2022-27166
Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.