Critical
CVE-2022-1440
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2022-1442
Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure
High
CVE-2022-24872
Improper Access Control in Shopware
High
CVE-2022-24871
Server-Side Request Forgery (SSRF) in Shopware
High
CVE-2022-51012
Insufficient type validation in pocketmine/pocketmine-mp
Medium
CVE-2022-24858
NextAuth.js default redirect callback vulnerable to open redirects
Medium
CVE-2022-24849
Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp
High
CVE-2022-24847
Improper Input Validation in GeoServer
Medium
ghsa-cf4q-4cqr-7g7w
SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
High
CVE-2022-24845
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<iface>.returns_int128()` is not validated to fall within the bounds of `int128`. Thi
High
CVE-2022-26924
YARP Denial of Service Vulnerability
High
CVE-2022-24828
Missing input validation can lead to command execution in composer
Medium
CVE-2011-2487
Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J
Medium
CVE-2011-1150
bbPress Cross-site Scripting (XSS) vulnerability
Critical
CVE-2011-4943
ImpressPages CMS RCE
Critical
CVE-2011-2715
Drupal SQL Injection vulnerability
Medium
CVE-2011-2714
Drupal Cross-Site Scripting vulnerability
Critical
CVE-2011-3583
Typo3 SQL injection due to faulty prepared statements
Medium
CVE-2011-4924
Zope XSS Vulnerability
Critical
CVE-2011-1028
Smarty3 Arbitrary PHP Code Execution
Medium
CVE-2011-2935
Elgg Reflected XSS Vulnerability
Medium
CVE-2011-4904
Typo3 Improper Access Control
Medium
CVE-2011-4903
Typo3 XSS in RemoveXSS function
Critical
CVE-2011-4628
Typo3 Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.