Critical
0a9b4c03-e7ec-48d6-87fe-67e8a5780703
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
ba5d1bd4-da0d-43f4-b28f-4a4a2702b3b0
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.6.9 - Cross-Site Scripting
High
CVE-2022-25898
JWS and JWT signature validation vulnerability with special characters
Low
CVE-2022-30120
Cross site scripting in Concrete CMS
Critical
CVE-2022-30117
Path traversal in Concrete CMS
High
CVE-2022-21829
Code injection in concrete CMS
Medium
CVE-2022-33910
MantisBT XSS through crafted SVG documents in file_download.php
High
CVE-2022-21231
Prototype Pollution in deep-get-set
Medium
CVE-2022-0899
Header Footer Code Manager <= 1.1.23 - Cross-Site Scripting
Unrated
CVE-2022-34061
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency
Unrated
CVE-2022-34054
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and d
Unrated
CVE-2022-33004
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and
Unrated
CVE-2022-33000
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information an
Unrated
CVE-2022-32998
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive us
Unrated
CVE-2022-32997
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user inform
Unrated
CVE-2022-32996
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user informat
Unrated
CVE-2022-30885
** Reserved ** The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2.
Medium
CVE-2022-34305
Cross-site Scripting in Apache Tomcat
Medium
CVE-2022-34208
Jenkins Beaker builder Plugin Missing Authorization vulnerability
Medium
CVE-2022-34298
NT auth module vulnerability in OpenAM
Low
CVE-2022-34213
Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text
Medium
CVE-2022-34212
Missing permission check in Jenkins vRealize Orchestrator Plugin
Medium
CVE-2022-34211
Cross-Site Request Forgery in Jenkins vRealize Orchestrator Plugin
Medium
CVE-2022-34210
Missing permission check in Jenkins ThreadFix Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.