High
CVE-2022-0819
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2022-23640
Improper Restriction of XML External Entity Reference in com.monitorjbl:xlsx-streamer
Medium
CVE-2021-36833
MC4WP: Mailchimp for WordPress <= 4.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-0577
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Medium
CVE-2022-0743
Cross site scripting in getgrav/grav
Medium
CVE-2022-26332
Cross-site Scripting in Cipi
Medium
CVE-2022-0776
Cross site scripting in reveal.js
High
CVE-2022-0777
Rate limit missing in microweber
High
CVE-2022-0818
WooCommerce Affiliate Plugin - Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting
Medium
bd57edf5-a75e-4677-a51e-9dd262eeba4a
MC4WP: Mailchimp for WordPress < 4.8.7 - Cross-Site Scripting
High
CVE-2022-0834
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
Critical
CVE-2022-0787
Limit Login Attempts (Spam Protection) <= 4.9.1 - Unauthenticated SQL Injection
Medium
ghsa-mfjm-vh54-3f96
Scrapy cookie-setting is not restricted based on the public suffix list
Medium
CVE-2022-24717
Cross Site Scripting (XSS) in @finastra/ssr-pages
High
CVE-2022-24718
Path Traversal in @finastra/ssr-pages
Medium
CVE-2022-25769
Improper regex in htaccess file
Critical
CVE-2022-0768
Server-Side Request Forgery (SSRF) in rudloff/alltube
Medium
CVE-2022-24712
Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4
Critical
CVE-2022-24711
Remote CLI Command Execution Vulnerability in CodeIgniter4
High
CVE-2021-41193
Use of Externally-Controlled Format String in wire-avs
High
CVE-2022-0679
Narnoo Distributor <= 2.5.1 - Path Traversal
Medium
CVE-2022-0493
String Locator <= 2.4.2 - Authenticated Arbitrary File Read
Medium
CVE-2021-24978
OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2021-24962
WordPress File Upload / WordPress File Upload Pro <= 4.16.2 - Authenticated (Contributor+) Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.