Medium
CVE-2022-1009
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
517653e5-fdad-4360-82a5-32b16a6cd631
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) <= 3.0.1 - Cross-Site Scripting
High
CVE-2022-1203
Content Mask <= 1.8.4 - Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2022-1567
WP JS <= 2.0.6 - Reflected Cross-Site Scripting
High
CVE-2023-30839
SQL filter bypass leading to arbitrary write requests using SQL Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
High
CVE-2023-30838
Possible XSS injection through Validate::isCleanHTML method
Medium
CVE-2023-30545
Arbitrary file read via the backoffice Database Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
Medium
CVE-2021-36844
WP Subscribe <= 1.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-29444
Breeze – WordPress Cache Plugin <= 2.0.2 - Unprotected AJAX Actions
Medium
CVE-2010-1459
Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2010-1330
Cross-site Scripting in in JRuby
Medium
CVE-2010-1244
Cross-site request forgery in Apache ActiveMQ
Medium
CVE-2010-1157
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
High
CVE-2010-1153
TYPO3 PHP remote file inclusion vulnerability
Medium
CVE-2010-0828
Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creatin
High
CVE-2010-0717
The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.
Low
CVE-2010-0684
Cross-site scripting in Apache ActiveMQ
Medium
CVE-2010-0668
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser l
High
CVE-2010-0669
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
High
CVE-2010-0667
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain se
High
CVE-2010-0329
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
Medium
CVE-2009-5054
Smarty Does Not Consider Umask Values When Setting Permissions
Low
CVE-2009-4963
Commerce extension for TYPO3 vulnerable to Cross-site Scripting
High
CVE-2009-4803
Accessibility Glossary (a21glossary) SQL injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.