Medium
CVE-2022-42486
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-4200
Login with Cognito <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
c4039a27-0100-49c5-8dce-cf015a08ef04
ContentStudio <= 1.1.8 - Missing Authorization
Medium
CVE-2022-45814
WP Calendar <= 1.5.3 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-38055
wpForo Forum <= 2.0.9 - Authenticated (Subscriber+) HTML Injection
Medium
CVE-2022-4340
BookingPress <= 1.0.30 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2022-45817
GC Testimonials <= 1.3.2 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-4198
WP Social Sharing <= 2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-44595
WP 2FA – Two-factor authentication for WordPress <= 2.2.0 - Missing Authorization
Medium
CVE-2022-4306
Panda Pods Repeater Field <= 1.5.3 - Reflected Cross-Site Scripting
High
CVE-2022-4147
Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed
Critical
CVE-2022-44900
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file
Medium
ghsa-vx2x-9cff-fhjw
DSInternals Credential Roaming Elevation of Privilege Vulnerability
High
CVE-2022-44289
Thinkphp has a code logic error
High
CVE-2022-23472
Passeo uses insecure random number generator
Critical
CVE-2022-24439
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone
Medium
CVE-2022-43556
Concrete CMS vulnerable to cross-site scripting in the text input field
Critical
CVE-2022-3241
Build App Online <= 1.0.18 - Unauthenticated SQL Injection
High
ef1468eb-9b98-4d45-b357-70998ba17de7
UpdraftCentral Dashboard 0.8.23 - Server-Side Request Forgery
High
d2031289-eaf3-4a1b-8771-769c08d99ca3
Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery
High
d0301141-bbc6-4a9e-b816-888554600b57
iubenda <= 3.3.2 - Cross-Site Request Forgery
Medium
CVE-2022-4256
All-in-One Addons for Elementor - WidgetKit <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4519
WP User <= 7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4260
WP-Ban <= 1.69 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.