Medium
CVE-2022-44736
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
b948574a-0aab-4596-83e6-04be21f78bc1
YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization
Medium
CVE-2022-45081
Add Multiple Marker <= 1.2 - Missing Authorization Checks to Settings Update
High
CVE-2022-45080
Add Multiple Marker <= 1.2 - Cross-Site Request Forgery
High
CVE-2022-45074
Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery
Critical
ghsa-99r3-xmmq-7q7g
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-8h83-chh2-fchp
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-446q-xxg5-3vhh
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-pcpm-vc4v-cmvx
eZ Platform users with the Company admin role can assign any role to any user
Critical
ghsa-g6jc-xrc3-4wwq
Ibexa DXP users with the Company admin role can assign any role to any user
Critical
ghsa-394j-x37r-2q27
Ibexa DXP users with the Company admin role can assign any role to any user
Critical
ghsa-7644-cxp8-h23r
ibexa/admin-ui vulnerable to Cross-site Scripting in content type name/shortname
High
CVE-2022-41876
ezplatform-graphql GraphQL queries can expose password hashes
Critical
ghsa-58h5-h554-429q
ezplatform-admin-ui vulnerable to Cross-Site Scripting (XSS)
Critical
ghsa-3p7g-wrgg-wq45
GraphQL queries can expose password hashes
Medium
CVE-2022-36022
Use of unclaimed s3 bucket in tests and examples
Medium
ghsa-98pf-gfh3-x3mp
Read the Docs vulnerable to Cross-Site Scripting (XSS)
High
ghsa-3qmc-2r76-4rqp
Redwood is vulnerable to account takeover via dbAuth "forgot-password"
High
CVE-2022-41879
Parse Server is vulnerable to Prototype Pollution via Cloud Code Webhooks
Medium
CVE-2022-36077
Exfiltration of hashed SMB credentials on Windows via file:// redirect
Medium
CVE-2022-42964
pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
Medium
CVE-2022-44244
Lin CMS vulnerable to Improper Authentication
High
CVE-2022-45129
Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF
Medium
CVE-2022-3837
Uji Countdown <= 2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.