High
CVE-2022-3141
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2022-34983
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
Unrated
CVE-2022-34982
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
Unrated
CVE-2022-34981
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
High
CVE-2022-34867
WP Libre Form 2 <= 2.0.8 - Sensitive Information Disclosure
High
CVE-2022-36313
file-type vulnerable to Infinite Loop via malformed MKV file
High
CVE-2022-32430
Hardcoded JWT Token in Lin CMS Spring Boot
Medium
e532a2b4-0fb4-4256-89a9-435b55d9de91
WordPress Membership, User Registration, Login Form, User Profile & Restrict Content Plugin – ProfilePress <= 3.2.15 - Reflected Cross-Site Scripting
Medium
CVE-2022-25811
Transposh WordPress Translation <= 1.0.9.1 - Authenticated (Admin+) SQL Injection via 'tp_editor'
Medium
CVE-2021-24910
Transposh WordPress Translation <= 1.0.7 - Reflected Cross-Site Scripting via tp_tp
High
CVE-2022-25812
Transposh WordPress Translation <= 1.0.9.1 - Remote Code Execution
Critical
CVE-2022-2314
VR Calendar <= 2.3.1 - Unauthenticated Remote Code Execution
Medium
CVE-2021-24912
Transposh WordPress Translation <= 1.0.9.1 - Cross-Site Request Forgery
Medium
CVE-2021-24911
Transposh WordPress Translation <= 1.0.7 - Unauthenticated Stored Cross-Site Scripting via 'tp_translation'
High
CVE-2022-2518
Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-2515
Simple Banner <= 2.11.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-25810
Transposh WordPress Translation <= 1.0.9.1 - Missing Authorization Checks
Critical
ghsa-m58q-qq5h-mgqq
Islandora 2.0 before 2.4.1 could allow any user to upload content into a repository
Medium
ghsa-fjh6-p566-wr6q
skylot jadx affected by Incorrect Behavior Order in vulnerable dependency
High
CVE-2022-31172
OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
High
CVE-2022-31170
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
Critical
CVE-2022-35912
Grails framework Remote Code Execution via Data Binding
Low
CVE-2022-31151
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
Medium
CVE-2022-31150
undici before v5.8.0 vulnerable to CRLF injection in request headers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.