Critical
CVE-2022-32214
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2022-32213
llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
Medium
CVE-2022-2372
YaySMTP – Simple WP SMTP Mail <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
a57675f0-d840-4954-b86e-a9fbc1483bc7
Name Directory <= 1.25.4 - Unauthorized Settings Update
Critical
54901d01-241a-4027-ba72-2b983608f9c6
Advanced Post Manager <= 4.5.1 - PHP Object Injection
Medium
45f32160-36eb-4d66-a6a6-a3d6f2f7bf1a
Ultimate Member <= 2.4.0 - Subscriber+ Stored Cross-Site Scripting
Medium
CVE-2022-2389
Abandoned Cart Recovery for WooCommerce by Autonami <= 2.1.1 - Missing Authorization
High
CVE-2022-31781
Apache Tapestry 5.8.1 vulnerable to ReDoS via Content Types causing catastrophic backtracking
High
CVE-2019-10761
vm2 before 3.6.11 vulnerable to sandbox escape
Medium
CVE-2022-32065
RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module
Medium
CVE-2022-32114
Strapi 4.1.12 Cross-site Scripting via crafted file
High
f4832fbb-94ed-41c4-8434-1972f4d92476
Ultimate Member <= 2.4.1 - Username Enumeration
Medium
CVE-2022-2398
WordPress Comments Fields <= 4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2594
Advanced Custom Fields <= 5.12.2 - File Upload
Low
CVE-2022-25858
terser (JS Package) < 5.14.2 - Denial of Service
High
CVE-2022-24800
October CMS upload process vulnerable to RCE via Race Condition
Unrated
drupal-contrib-2022-048
drupal/entity_print - SA-CONTRIB-2022-048
High
CVE-2019-10800
Codecov does not sanitize gcov arguments
Medium
CVE-2022-25875
Svelte vulnerable to XSS when using objects during server-side rendering
Medium
CVE-2022-33155
Cross site scripting in ameos_tarteaucitron
Medium
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Medium
CVE-2022-33157
libconnect Extension for Typo3 Vulnerable to XSS
Critical
CVE-2022-1950
Youzify <= 1.1.9 - SQL Injection
High
CVE-2022-2269
Website File Changes Monitor <= 1.8.2 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.