Medium
CVE-2022-4142
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
145fec62-87a7-4641-9ce4-dca5afb47d69
Add to home screen WP Plugin <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-46164
NodeBB vulnerable to account takeover via prototype vulnerability
High
CVE-2022-37783
Craft CMS discloses password hashes
High
CVE-2022-41957
muhammara and hummus vulnerable to Unchecked Return Value to NULL Pointer Dereference
Critical
CVE-2022-45046
camel-ldap component allows LDAP Injection when using the filter option
Critical
CVE-2022-42496
nadesiko3 vulnerable to OS Command Injection
Medium
CVE-2022-41777
nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit
Critical
CVE-2022-41642
Nadesiko3 OS Command Injection vulnerability
High
CVE-2022-43484
TERASOLUNA Server Framework vulnerable to ClassLoader manipulation
Medium
CVE-2022-4236
Welcart e-Commerce <= 2.8.4 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2022-4166
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS
High
CVE-2022-4150
Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id
Medium
CVE-2022-3835
Kwayy HTML Sitemap <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scipting
High
CVE-2022-4153
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[]
Medium
CVE-2022-4227
Booster (<= 5.6.2), Booster Plus (< 6.0.0), and Booster Elite (< 6.0.0) for WooCommerce - Reflected Cross-Site Scripting
High
CVE-2022-4159
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id
Medium
CVE-2022-3853
Supra CSV <= 4.0.3 - Stored Cross-Site Scripting via Cross-Site Request Forgery
High
CVE-2022-41650
Custom Content by Country <= 3.1.2 - Cross-Site Request Forgery
High
CVE-2022-4162
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_row
High
CVE-2022-4165
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order
High
CVE-2022-4152
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET
Medium
CVE-2022-45816
GD bbPress Attachments <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-4120
Stop Spammers Security <= 2022.5 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.