Medium
CVE-2022-45352
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-4016
Booster (<= 5.6.6), Booster Plus (<= 5.6.5), and Booster Elite (<= 1.1.7) for WooCommerce - Cross-Site Request Forgery leading to Arbitrary Custom Role Creation/Deletion
Medium
CVE-2022-3561
Cross-site Scripting in librenms/librenms
High
CVE-2022-3525
Deserialization of Untrusted Data in librenms/librenms
High
CVE-2022-4068
Cross-site Scripting in librenms/librenms
Medium
CVE-2022-4067
Cross-site Scripting in librenms/librenms
Medium
CVE-2022-3562
Cross-site Scripting in librenms/librenms
Medium
CVE-2022-3516
Cross-site Scripting in librenms/librenms
Critical
CVE-2022-4070
Insufficient Session Expiration in librenms/librenms
Medium
CVE-2022-4069
Cross-site Scripting in librenms/librenms
Medium
CVE-2022-4010
Image Hover Effects <= 5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
624af5e1-dc40-4d33-bfac-1a409b81a096
SpeakOut! Email Petitions <= 4.0.3 - Reflected Cross-Site Scripting
Medium
1254e0ad-852e-4fd4-8317-61bfbbc9f737
External Links <= 2.55 - Authenticated (Administrator+) Cross-Site Scripting
High
CVE-2022-4065
TestNG is vulnerable to Path Traversal
High
f6c94024-20fb-4cc1-a093-1b9974e61220
Address Autocomplete Using Google Place Api <= 1.0.0 - Cross-Site Request Forgery
Medium
f62063c8-7559-492a-9caf-fae256052d1a
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.8.34 - Missing Authorization to Plugin Deactivation
High
CVE-2022-3861
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2022-3883
StopBadBots <= 7.23 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2022-3881
WP Tools <= 3.42 - Missing Authorization to Select Plugin Installation
Medium
CVE-2022-3879
Car Dealer <= 3.04 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2022-3882
Memory Usage <= 2.45 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2022-43468
WordPress Popular Posts <= 6.0.5 - Unauthenticated Views Changes
High
CVE-2022-43171
LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind
High
CVE-2022-43183
XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.