Medium
CVE-2018-14773
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filters
High
CVE-2018-12613
phpMyAdmin Improper Authentication
High
CVE-2022-23064
snipe-IT vulnerable to host header injection
Medium
CVE-2009-0816
Typo3 Backend XSS Vulnerability
High
ghsa-f6p5-76fp-m248
URL Rewrite vulnerability in multiple zendframework components
High
CVE-2022-24871
Server-Side Request Forgery (SSRF) in Shopware
High
CVE-2022-51012
Insufficient type validation in pocketmine/pocketmine-mp
Medium
CVE-2011-4902
Typo3 Arbitrary File Delete
High
CVE-2022-24833
Persistent Cross-site Scripting vulnerability in PrivateBin
High
CVE-2021-40219
Code Injection in Bolt CMS
High
CVE-2016-5385
HTTP Proxy header vulnerability
High
CVE-2021-43008
Files or Directories Accessible to External Parties in Adminer
High
CVE-2022-1213
Server side request forgery in LiveHelperChat
High
ghsa-5jfw-35xp-5m42
Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown
High
CVE-2021-48007
NaN/INF in serverbound movement packets can crash clients and servers
Critical
CVE-2021-42171
Unrestricted Upload of File with Dangerous Type in Zenario CMS
High
CVE-2021-44618
Server-side Template Injection in nystudio107/craft-seomatic
High
CVE-2022-24739
Server-Side Request Forgery and Open Redirect in AllTube Download
Medium
CVE-2022-26332
Cross-site Scripting in Cipi
Critical
CVE-2022-0768
Server-Side Request Forgery (SSRF) in rudloff/alltube
High
CVE-2022-23043
File upload restriction bypass in Zenario CMS
Medium
CVE-2022-23655
Missing server signature validation in OctoberCMS
High
CVE-2022-0721
Insertion of Sensitive Information Into Debugging Code in Microweber
High
CVE-2022-24980
SSRF in Kitodo.Presentation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.