Medium
CVE-2022-45839
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-41946
TemporaryFolder on unix-like systems does not limit access to created files
High
CVE-2022-45868
Password exposure in H2 Database
Low
ghsa-8jh9-wqpf-q52c
sweetalert2 v8.19.1 and above contains hidden functionality
Low
ghsa-pg98-6v7f-2xfv
sweetalert2 v9.17.4 and above contains hidden functionality
Low
ghsa-457r-cqc8-9vj9
sweetalert2 v10.16.10 and above contains hidden functionality
Medium
CVE-2022-45151
Moodle stored-XSS vulnerability in some "social" user profile fields
Medium
CVE-2022-45150
Moodle reflected cross-site scripting vulnerability in policy tool
Medium
CVE-2022-45149
Cross-Site Request Forgery in Moodle
Low
ghsa-qq6h-5g6j-q3cm
sweetalert2 v11.4.9 and above contains hidden functionality
Critical
CVE-2022-45462
Command injection in Apache DolphinScheduler Alert Plugins
Medium
CVE-2022-42095
Cross-site Scripting in Backdrop CMS
Medium
CVE-2022-45848
Contest Gallery <= 13.1.0.9 - Cross-Site Scripting
Medium
CVE-2022-45849
Activello <= 1.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-45358
Activello <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-45843
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-45845
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2022-44589
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes
High
CVE-2022-45846
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
High
CVE-2022-45850
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
Medium
CVE-2022-45852
WP-FormAssembly <= 2.0.5 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2022-44581
Defender Security <= 3.3.2 - Sensitive Information Disclosure
Medium
CVE-2022-45851
ShareThis Dashboard for Google Analytics <= 3.1.4 - Missing Authorization
High
CVE-2022-45838
ARForms Form Builder <= 1.5.6 - Unauthenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.