High
CVE-2022-0315
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-25612
Simple Event Planner plugin <= 1.5.4 - Cross-Site Scripting
Medium
CVE-2022-25611
Simple Event Planner <= 1.5.4 - Authenticated Stored Cross-Site Scripting
High
CVE-2022-26183
Untrusted Search Path in PNPM
High
CVE-2022-1036
Integer Overflow or Wraparound in Microweber
High
CVE-2022-1034
Unrestricted Upload of File with Dangerous Type in ShowDoc
Critical
CVE-2022-26260
Prototype Pollution in simple-plist
Medium
CVE-2022-0994
Hummingbird <= 3.3.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1560
Amministrazione Aperta <= 3.7.3 - Admin+ Local File Inclusion
High
ghsa-5w9c-rv96-fr7g
Removal of functional code in faker.js
Low
CVE-2022-21718
Renderers can obtain access to random bluetooth device without permission in Electron
High
CVE-2022-25481
Exposure of Resource to Wrong Sphere in ThinkPHP Framework
High
CVE-2022-25766
Command Injection in ungit
Critical
CVE-2022-26960
Path Traversal in Studio-42 elFinder through 2.1.60
Critical
CVE-2022-1020
Product Table for WooCommerce <= 3.1.2 - Missing Authorization
Medium
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
Medium
CVE-2022-0661
Ad Injection <= 1.2.0.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-0765
Loco Translate <= 2.6.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-1001
WP Downgrade <= 1.2.2 - Admin+ Stored Cross-Site Scripting
Critical
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
High
CVE-2022-24775
guzzlehttp/psr7 <= 1.84 and 2.0.0-2.1.0 - Improper Input Validation
Medium
CVE-2022-25609
Yoo Slider plugin <= 2.0.0 - Stored Cross-Site Scripting
Medium
CVE-2022-25608
Yoo Slider – Image Slider & Video Slider <= 2.0.0 - Cross-Site Request Forgery
Critical
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.