Low
CVE-2022-24744
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-24745
Shopware guest session is shared between customers
High
CVE-2021-38296
Authentication Bypass by Capture-replay in Apache Spark
Critical
CVE-2022-0482
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments
High
CVE-2022-0896
Improper Neutralization of Special Elements Used in a Template Engine in microweber
Medium
2ed1f200-5a27-4905-ac88-394b214bb430
WooCommerce < 6.3.1 - Unauthorized Order Status Change
Unrated
drupal-contrib-2022-029
drupal/opigno_learning_path - SA-CONTRIB-2022-029
Unrated
drupal-contrib-2022-028
drupal/svg_formatter - SA-CONTRIB-2022-028
High
CVE-2022-24739
Server-Side Request Forgery and Open Redirect in AllTube Download
Medium
CVE-2022-0877
Cross-site Scripting in BookStack
High
CVE-2022-0709
Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure
Medium
CVE-2022-0884
Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-27855
Fatcat Apps Analytics Cat <= 1.0.9 - Cross-Site Request Forgery
Critical
CVE-2022-0766
Server-Side Request Forgery in calibreweb
Critical
CVE-2022-0767
Server-Side Request Forgery in calibreweb
Medium
CVE-2022-0431
Google Pagespeed Insights <= 4.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-0887
Easy Social Icons <= 3.1.3 - Admin+ SQL Injection
Critical
CVE-2021-25070
WP Block and Stop Bad Bots <= 6.88 - SQL Injection
Medium
CVE-2022-0830
FormBuilder <= 1.08 - Cross-Site Request Forgery
Medium
CVE-2022-24737
Exposure of Sensitive Information to an Unauthorized Actor in httpie
Critical
CVE-2021-46703
Code injection in RazorEngine
Medium
CVE-2022-0868
Open Redirect in urijs
Critical
CVE-2021-46704
OS Command Injection in GenieACS
High
CVE-2022-0770
Translate WordPress with GTranslate <= 2.9.8 & Translate WordPress – Google Language Translator <= 6.0.13 - Missing Authorization to Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.