Medium
CVE-2022-3002
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
High
CVE-2022-40313
Moodle Stored Cross-site Scripting and page denial of service
Medium
CVE-2022-40408
FeehiCMS vulnerable to Cross-Site scripting via crafted payload
Medium
CVE-2021-40694
Moodle Improper Encoding or Escaping of Output
Low
CVE-2022-40199
EC-CUBE Directory traversal vulnerability
Medium
CVE-2022-40044
Centreon contains cross-site scripting vulnerability via esc_name parameter
High
CVE-2022-40043
Centreon SQL Injection vulnerability via esc_name parameter
High
CVE-2022-41343
Dompdf allows remote file inclusion because URI validation failure does not halt font registration
Medium
CVE-2022-3255
Pimcore vulnerable to cross site scripting
Medium
CVE-2022-3242
Microweber Cross-site Scripting can result in redirection to a malicious site
Medium
CVE-2022-3005
YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module
Medium
CVE-2022-3004
YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module
Medium
CVE-2022-3000
YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module
Medium
CVE-2022-2924
YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module
Medium
CVE-2022-3245
Microweber vulnerable to HTML Injection in create tag functionality
Medium
CVE-2022-3231
LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter
Medium
CVE-2022-37251
Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts
Medium
CVE-2022-36101
Shopware contains sensitive data in backend customer module
Medium
CVE-2022-36102
Shopware access control list bypassed via crafted specific URLs
Medium
CVE-2022-36032
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent
Medium
CVE-2022-36104
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Medium
CVE-2018-25047
Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto
Critical
CVE-2022-38352
ThinkPHP deserialization vulnerability
Medium
CVE-2022-38796
Feehi CMS host header injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.