High
CVE-2022-33901
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2022-2438
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2022-2411
Auto More Tag <= 4.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2461
Transposh WordPress Translation <= 1.0.9.6 - Unauthorized Settings Change
Medium
CVE-2022-2386
Crowdsignal Dashboard – Polls, Surveys & more <= 3.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2022-2424
Google Maps Anywhere <= 1.2.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-34538
Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
Critical
CVE-2021-36711
Octobot mishandles Tentacles upload
Medium
CVE-2022-25869
Angular (deprecated package) Cross-site Scripting
Critical
CVE-2022-31180
Shescape vulnerable to insufficient escaping of whitespace
High
CVE-2022-31179
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Medium
ghsa-q37h-jhf3-85cj
Bypass of CMS Safe Mode Security Feature
High
CVE-2021-3859
Undertow vulnerable to Denial of Service (DoS) attacks
High
CVE-2021-3690
Undertow vulnerable to memory exhaustion due to buffer leak
High
CVE-2022-31158
LTI 1.3 Tool Library's Nonce Claim Value not validated against nonce value sent in Authentication Request before v5.0
High
CVE-2022-31157
LTI 1.3 Tool Library's function used to generate random nonces not sufficiently cryptographically complex before v5.0
High
CVE-2020-28191
Togglz console missing cross-site request forgery (CSRF) protection
High
CVE-2022-31159
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
High
CVE-2020-10650
jackson-databind vulnerable to unsafe deserialization
Medium
ghsa-6f85-3f8q-qc94
OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor
High
CVE-2022-31142
fastify-bearer-auth vulnerable to Timing Attack Vector
Critical
CVE-2015-8031
Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2
Critical
CVE-2022-35628
SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
Medium
CVE-2021-4178
fabric8 kubernetes-client vulnerable
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.