Medium
CVE-2022-40205
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-41343
Dompdf allows remote file inclusion because URI validation failure does not halt font registration
Medium
CVE-2022-4381
Popup Maker <= 1.16.8 - Authenticated (Contributor+) Cross-Site Scripting
Medium
eb0b9c2b-c536-4697-be4c-7557ba66c2c4
WPML <= 4.5.10 - Unprotected AJAX Actions
Medium
CVE-2022-41155
iQ Block Country <= 1.2.18 - Country Blocking Bypass
Medium
CVE-2022-2574
Meks Easy Social Share <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
8f7b0a1c-16d7-45db-b419-569ed5c4a5e4
Make, formerly Integromat Connector <= 1.5.2 - Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-3282
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.6.4 - File Upload Size Limit Bypass
Medium
CVE-2022-2563
Tutor LMS <= 2.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2834
Helpful <= 4.5.25 - Sensitive Information Disclosure
High
CVE-2022-27858
Activity Log <= 2.8.3 - CSV Injection
High
CVE-2022-32587
WP Page Widget <= 3.9 - Cross-Site Request Forgery
High
CVE-2022-3126
Frontend File Manager Plugin <= 21.2 - Cross-Site Request Forgery to File Upload
Medium
CVE-2021-36830
Comment Guestbook <= 0.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-33683
Apache Pulsar Brokers and Proxies vulnerable to Improper Certificate Validation
Medium
CVE-2022-33682
Apache Pulsar Broker, Proxy, and WebSocket Proxy vulnerable to Improper Certificate Validation
Medium
CVE-2022-33681
Apache Pulsar Java Client vulnerable to Improper Certificate Validation
Critical
CVE-2022-3269
Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.
High
CVE-2020-36604
hoek subject to prototype pollution via the clone function.
Critical
CVE-2022-26112
Apache Pinot has Groovy Function support enabled by default
Critical
CVE-2022-36944
Scala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization
Medium
CVE-2022-24280
Proxy component of Apache Pulsar subject to abuse as Denial of Service endpoint
Critical
CVE-2022-23463
Nepxion Discovery vulnerable to SpEL Injection leading to Remote Code Execution
Medium
CVE-2022-23464
Nepxion Discovery vulnerable to potential Information Disclosure due to Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.