Critical
CVE-2020-28462
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2020-28461
js-ini Prorotype Pollution when malicious INI files submitted to an application that parses it with `parse`
Medium
CVE-2020-28455
markdown-it-toc Cross-site Scripting due to title of generated toc and contents of header not being escaped
Critical
CVE-2020-28447
xopen is vulnerable to OS Command Injection in Exported Function xopen(filepath)
Critical
CVE-2020-28446
ntesseract vulnerable to Command Injection
Critical
CVE-2020-28443
sonar-wrapper Command Injection vulnerability
Medium
CVE-2022-35653
Moodle LTI module reflected XSS risk
Medium
CVE-2022-35652
Moodle Open redirect risk in mobile auto-login feature
Critical
CVE-2022-35649
Moodle PostScript Code Injection
High
CVE-2022-35650
Moodle Arbitrary file read when importing lesson questions
Medium
CVE-2022-35651
Moodle Stored XSS and blind SSRF possible via SCORM track details
Critical
CVE-2022-35131
Joplin is vulnerable to arbitrary code execution
High
CVE-2022-2388
WP Coder <= 2.5.2 - Cross-Site Request Forgery
Medium
CVE-2022-2377
Directorist – WordPress Business Directory Plugin with Classified Ads Listings <= 7.2.3 - Missing Authorization
Medium
CVE-2022-2382
Product Slider for WooCommerce <= 2.5.6 - Missing Authorization
Medium
CVE-2022-1932
Rezgo Online Booking <= 4.1.7 - Reflected Cross-Site-Scripting
High
cbb51383-1eab-4490-aa4c-bd1488312400
Trust Payments Gateway (3DS2) <= 1.2.2 - Cross-Site Request Forgery
High
CVE-2022-2540
Link Optimizer Lite <= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting
High
c80e6f0b-ccca-4755-b64e-cfcebc5cc1fe
WP Sticky Button <= 1.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-36375
Tabs – Responsive Tabs with WooCommerce Product Tab Extension <= 3.6.0 - Authenticated (Admin+) Arbitrary Options Update
Medium
CVE-2022-1322
Coming Soon – Under Construction <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
6be64d8d-fc71-40c2-baa8-985445d953ea
SmartIdeo <= 2.7.0 - Stored Cross-Site Scripting
Medium
CVE-2022-0446
Simple Banner <= 2.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2542
uContext for Clickbank <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.