Medium
CVE-2022-22818
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
d3c4b62b-c8b1-40b8-b250-d9da94208c62
EasyJobs <= 1.4.7 - Reflected Cross-Site Scripting
High
a596c9c4-ceb4-470c-8ad5-986cd62da91e
Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution
High
CVE-2022-21724
pgjdbc Does Not Check Class Instantiation when providing Plugin Classes
Medium
CVE-2021-41571
Improper Input Validation in Apache Pulsar
High
CVE-2021-44451
Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgra
Medium
CVE-2021-45416
RosarioSIS XSS Vulnerability
Critical
CVE-2022-0401
Path Traversal in w-zip
Medium
CVE-2022-24198
Out-of-bounds Read in iText
Medium
CVE-2022-24197
Out-of-bounds Write in iText
Medium
CVE-2022-24196
Allocation of Resources Without Limits or Throttling in iText
Critical
CVE-2022-0349
NotificationX <= 2.3.8 - Blind SQL Injection
Medium
CVE-2022-0448
CP Blocks <= 1.0.14 - Authenticated Stored Cross-Site Scripting via License ID settings
High
CVE-2021-25087
Download Manager <= 3.2.34 - Sensitive Information Disclosure
Medium
CVE-2021-24953
Advanced iFrame <= 2021.9 Reflected Cross-Site Scripting
Medium
CVE-2021-24825
Custom Content Shortcode <= 4.0.1 - Authenticated Arbitrary File Access / Local File Inclusion
Medium
CVE-2021-24824
Custom Content Shortcode <= 3.8.8 - Unauthorised Arbitrary Post Metadata Access
Medium
CVE-2022-0389
WP Time Slots Booking Form <= 1.1.62 - Stored Cross-Site Scripting
Medium
CVE-2021-24826
Custom Content Shortcode <= 4.0.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-0414
Dolibarr vulnerable to Improper Validation of Specified Quantity in Input
Critical
CVE-2021-42767
Neo4j Graph Database vulnerable to Path Traversal
Medium
CVE-2021-32842
Path Traversal in SharpZipLib
Medium
CVE-2021-32841
Path Traversal in SharpZipLib
High
CVE-2021-32840
Path Traversal in SharpZipLib
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.