Medium
a8163dc0-e380-4a0b-bd18-34a3e80ca3dd
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-31148
Shopware vulnerable to persistent cross site scripting (XSS) in customer module
Medium
CVE-2022-31109
Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack
Unrated
drupal-contrib-2022-051
drupal/tagify - SA-CONTRIB-2022-051
Unrated
drupal-contrib-2022-050
drupal/pdf_api - SA-CONTRIB-2022-050
Medium
CVE-2022-33943
BxSlider WP <= 2.0.0 - Authenticated (Contributor+) Cross-Site Scripting
High
CVE-2022-2431
Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion
Critical
CVE-2022-2551
Duplicator – WordPress Migration Plugin <= 1.4.7 - Unauthenticated Backup Download
High
CVE-2022-2552
Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure
Medium
CVE-2022-35882
GS Testimonial Slider <= 1.9.6 - Authenticated (Author+) Stored Cross-Site Scripting
High
2030698f-1180-432b-9a66-3039fdda79fd
Booster for WooCommerce <= 5.6.1 - Cross-Site Request Forgery
High
CVE-2022-33977
untangle vulnerable to XML Entity Expansion
High
CVE-2022-31471
untangle vulnerable to Improper Restriction of XML External Entity Reference
Medium
CVE-2022-21802
grapesjs before 0.19.5 vulnerable to Cross-site Scripting
Critical
CVE-2020-28441
conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2
Critical
CVE-2020-28438
deferred-exec Command Injection vulnerability
Critical
CVE-2020-28436
google-cloudstorage-commands Command Injection vulnerability
Critical
CVE-2020-28435
ffmpeg-sdk vulnerable to OS Command Injection
High
CVE-2020-28422
git-archive vulnerable to Command Injection via exports function
Critical
CVE-2021-23451
otp-generator before v3.0.0 insecurely generates random one-time passwords
Medium
CVE-2021-23397
@ianwalter/merge Prototype Pollution via `merge` function
Critical
CVE-2021-23373
set-deep-prop Prototype Pollution
Critical
CVE-2020-7678
node-import `params` argument can be controlled by users without any sanitization
Medium
CVE-2020-7649
snyk-broker Path Traversal before v4.73.0
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.