High
CVE-2022-46175
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2022-46170
CodeIgniter4 Potential Session Handlers Vulnerability
High
CVE-2022-23556
CodeIgniter4 allows spoofing of IP address when using proxy
Critical
CVE-2022-45347
Apache ShardingSphere-Proxy Incomplete Cleanup vulnerability
Medium
CVE-2022-25948
liquidjs may leak properties of a prototype
Medium
CVE-2022-23541
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
Medium
CVE-2022-23540
jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
High
CVE-2022-23539
jsonwebtoken unrestricted key type could lead to legacy keys usage
Medium
CVE-2022-4644
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
High
CVE-2022-4646
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
Medium
CVE-2022-4647
Microweber vulnerable to Stored Cross-Site Scripting
Medium
CVE-2022-4640
Mingsoft MCMS Cross-site Scripting vulnerability
Medium
CVE-2022-4638
A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The man
Medium
CVE-2022-4482
Carousel, Slider, Gallery by WP Carousel <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4453
3D FlipBook <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4648
Real Testimonials <= 2.5.11 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2022-4478
Font Awesome <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2022-4309
Subscribe2 <= 10.37 - Cross-Site Request Forgery
Medium
094c0952-4e28-4ed0-80ae-14fcf10cf2e1
Survey Maker – Best WordPress Survey Plugin <= 3.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Low
CVE-2020-36620
EnumStringValues vulnerable to Uncontrolled Resource Consumption
High
CVE-2021-4264
dustjs-linkedin vulnerable to Prototype Pollution
Critical
CVE-2022-40145
Apache Karaf vulnerable to potential code injection
High
CVE-2022-24431
abacus-ext-cmdline vulnerable to Command Injection
Medium
CVE-2022-25929
Smoothie vulnerable to Cross-site Scripting when tooltipLabel or strokeStyle are controlled by users
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.