Critical
CVE-2022-28118
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2021-46440
Insecure password handling vulnerability in Strapi
Medium
CVE-2022-1456
Poll Maker <= 4.0.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-24902
TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There a
Medium
CVE-2011-0013
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
High
CVE-2022-21167
Code Injection in Masuit.Tools.Core
Medium
CVE-2022-21149
SCart is vulnerable to cross-site scripting (XSS)
Critical
CVE-2022-24437
OS Command Injection in git-pull-or-clone
High
CVE-2022-21144
Denial of service vulnerability exists in libxmljs
High
CVE-2022-21189
Prototype Pollution in Dexie
High
CVE-2022-23923
Privilege Issues in jailed
High
CVE-2022-1544
Improper neutralization of formula elements in yii-helpers
Medium
CVE-2022-25645
Prototype Pollution in dset
Medium
CVE-2022-25349
materialize-css vulnerable to cross-site Scripting (XSS) due to improper escape of user input
High
CVE-2022-25647
Deserialization of Untrusted Data in Gson
Medium
CVE-2022-25842
Path Traversal in com.alibaba.oneagent:one-java-agent-plugin
Critical
CVE-2022-25767
Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console
High
CVE-2021-40822
GeoServer allows SSRF via the option for setting a proxy host
Medium
CVE-2022-25844
angular vulnerable to regular expression denial of service (ReDoS)
High
CVE-2022-25301
Prototype Pollution in jsgui-lang-essentials
High
CVE-2022-23064
snipe-IT vulnerable to host header injection
Critical
CVE-2022-28056
Incorrect Permission Assignment for Critical Resource in ShopXO
Medium
CVE-2022-1528
VikBooking <= 1.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-1562
Enable SVG <= 1.3.1 - Cross-Site Scripting via SVG
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.