Medium
CVE-2021-25094
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
46258dc2-3e05-4050-baad-3b3ded912bfe
Shopping Cart & eCommerce Store <= 5.2.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-0706
Easy Digital Downloads <= 2.11.5 - Admin+ Cross-Site Scripting
Critical
3ed280ba-d7e5-4637-ab84-93dc82c009d8
Admin Word Count Column <= 2.2 - Arbitrary File Read
Low
CVE-2019-9942
Twig Sandbox Information Disclosure
High
CVE-2019-18887
Symfony Http-Kernel has non-constant time comparison in UriSigner
Critical
CVE-2020-13756
Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()
Medium
CVE-2020-26138
FormField with square brackets in field name skips validation
High
CVE-2019-10905
Parsedown Class-Name Injection
High
ghsa-3988-h75v-hwf6
Arbitrary shell execution
High
ghsa-mhfv-8rc9-w38c
Arbitrary shell execution
Medium
CVE-2022-25576
Cross-Site Request Forgery in Anchor CMS
Critical
CVE-2021-43090
Improper Restriction of XML External Entity Reference in soa-model
High
CVE-2022-1064
SQL Injection in Fork CMS
High
CVE-2021-43091
SQL Injection in Yeswiki
Medium
CVE-2021-20323
Cross-site Scripting in Keycloak
High
CVE-2022-0983
SQL Injection in Moodle
High
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Medium
CVE-2022-27820
Improper Certificate Validation in OWASP ZAP
Medium
CVE-2022-0145
Cross-site Scripting in Fork CMS
High
CVE-2022-25568
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
Medium
CVE-2022-0955
Cross-site Scripting in Pimcore Datahub
High
CVE-2022-0153
SQL Injection in Fork CMS
High
CVE-2022-1091
Safe SVG <= 1.9.9 - Content-Type Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.