High
CVE-2022-29712
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Medium
CVE-2022-29711
Cross site scripting in librenms
Critical
ghsa-2x4v-g8cx-jxrq
Login timing attack in ibexa/core
Critical
ghsa-xfqg-p48g-hh94
Login timing attack in ezsystems/ezpublish-kernel
Critical
ghsa-342c-vcff-2ff2
Login timing attack in ezsystems/ezplatform-kernel
Critical
CVE-2022-25772
Cross-site Scripting vulnerability in Mautic's tracking pixel functionality
Medium
CVE-2022-51011
Denial-of-service vulnerability processing large chat messages containing many newlines
Unrated
drupal-contrib-2022-042
drupal/embed - SA-CONTRIB-2022-042
High
CVE-2022-29305
SQL injection in helloxz/imgurl
Medium
CVE-2021-36027
Magento stored cross-site scripting vulnerability
Medium
CVE-2021-36026
Magento stored cross-site scripting vulnerability in the customer address upload feature
Critical
CVE-2020-35129
Mautic stored Cross-site Scripting (XSS)
High
CVE-2019-8154
Magento remote code execution vulnerability
High
CVE-2019-11832
TYPO3 Image Processing susceptible to Code Execution
High
CVE-2021-43559
Moodle contains CSRF vulnerability
Medium
CVE-2021-33618
Dolibarr ERP and CRM contain XSS Vulnerability
Critical
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
High
CVE-2021-36043
Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension
Critical
CVE-2020-21809
NukeViet SQL Injection vulnerability
Medium
CVE-2021-28585
Magento Improper input validation vulnerability
Medium
CVE-2020-6578
Reflected XSS in Zen Cart before 1.5.7a
Medium
CVE-2021-28380
Aimeos Typo3 extension contains Cross-site Scripting vulnerability
Medium
CVE-2021-20282
Moodle Bypass email verification secret when confirming account registration
Medium
CVE-2021-20279
Moodle contains Stored XSS via ID number user profile field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.