Critical
CVE-2022-25098
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-25355
EC-CUBE improperly handles HTTP Host header values
High
CVE-2022-25838
Multi-Factor Authentication issue in Laravel Fortify
Medium
CVE-2022-0681
Simple Membership <= 4.0.9 - Cross-Site Request Forgery to Arbitrary Transaction Deletion
Medium
CVE-2022-23653
B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases of the B2 command-line tool version 3.2.0 and below contain a key disclosure vuln
Medium
CVE-2022-23655
Missing server signature validation in OctoberCMS
High
CVE-2022-0654
Cookie exposure in requestretry
High
CVE-2022-0721
Insertion of Sensitive Information Into Debugging Code in Microweber
High
CVE-2022-0724
Insecure Storage of Sensitive Information in Microweber
High
CVE-2022-0719
Cross-site Scripting in Microweber
Medium
CVE-2022-0731
Improper Authorization in dolibarr/dolibarr
Medium
CVE-2022-0750
Photoswipe Masonry Gallery <= 1.2.14 Stored Cross-Site Scripting
Medium
CVE-2022-4932
Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-23651
b2-sdk-python TOCTOU application key disclosure
Medium
CVE-2022-0692
Open Redirect in AllTube
High
CVE-2022-21705
Authenticated remote code execution in October CMS
Unrated
drupal-contrib-2022-027
drupal/govuk_theme - SA-CONTRIB-2022-027
Unrated
drupal-contrib-2022-026
drupal/entity_reference_tree - SA-CONTRIB-2022-026
High
CVE-2022-0736
Insecure Temporary File in mlflow
Medium
CVE-2022-0665
Path traversal in pimcore
High
CVE-2022-0687
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload
Medium
CVE-2022-0627
Amelia <= 1.0.46 - Reflected Cross-Site Scripting
Medium
CVE-2022-4931
BackupWordPress <= 3.12 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-0616
Amelia <= 1.0.46 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.