Medium
CVE-2022-36107
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-36108
TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper
High
CVE-2022-36092
XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action
High
CVE-2022-36093
XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard
High
CVE-2022-36094
XWiki Platform Web Parent POM vulnerable to XSS in the attachment history
Medium
CVE-2018-25047
Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto
Critical
CVE-2022-37266
steal vulnerable to Prototype Pollution via key variable in babel.js
Critical
CVE-2022-37257
steal vulnerable to Prototype Pollution via requestedVersion variable
Medium
CVE-2022-3224
parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing
Critical
CVE-2022-38352
ThinkPHP deserialization vulnerability
Medium
CVE-2022-3211
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
Critical
CVE-2022-37264
steal vulnerable to Prototype Pollution via optionName variable
High
CVE-2022-37262
steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments
High
CVE-2022-37260
steal vulnerable to Regular Expression Denial of Service via input variable
Medium
546d4f19-0e6f-447b-95c9-d86291477c80
Database Browser <= 1.4.4 - Authenticated (Administrator+) Cross-Site Scripting
Medium
52a03c45-1d65-43aa-b30f-13698019e05f
miniOrange's Google Authenticator <= 5.5.82 - Missing Authorization
High
CVE-2022-3221
rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access
High
CVE-2022-25897
Eclipse Milo vulnerable to Resource Exhaustion (Denial of Service)
Low
ghsa-r7vq-6425-j94w
Python-TUF vulnerable to incorrect threshold signature computation for new root metadata
Medium
ghsa-gqqf-g5r7-84vf
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
Medium
CVE-2022-39202
matrix-appservice-irc vulnerable to IRC mode parameter confusion
High
CVE-2022-39203
Parsing issue in matrix-org/node-irc leading to room takeovers
High
CVE-2022-38013
.NET Denial of Service Vulnerability
Critical
CVE-2022-2900
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.