High
CVE-2022-24800
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Unrated
drupal-contrib-2022-048
drupal/entity_print - SA-CONTRIB-2022-048
High
CVE-2019-10800
Codecov does not sanitize gcov arguments
Medium
CVE-2022-25875
Svelte vulnerable to XSS when using objects during server-side rendering
Medium
CVE-2022-33155
Cross site scripting in ameos_tarteaucitron
Medium
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Medium
CVE-2022-33157
libconnect Extension for Typo3 Vulnerable to XSS
Critical
CVE-2022-1950
Youzify <= 1.1.9 - SQL Injection
High
CVE-2022-2269
Website File Changes Monitor <= 1.8.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-31139
UnsafeAccessor 1.4.0 until 1.7.0 has no security checking for UnsafeAccess.getInstance()
High
CVE-2022-31140
Valinor error messages leading to potential data exfiltration before v0.12.0
Medium
CVE-2022-25303
Whoogle Search Cross-site Scripting via string parameter
Medium
CVE-2022-31475
GiveWP <= 2.20.2 - Authenticated Arbitrary File Read
Medium
CVE-2022-28700
GiveWP <= 2.20.2 - Authenticated Arbitrary File Creation
Critical
CVE-2022-31573
ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
Critical
CVE-2022-31558
Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely
Critical
CVE-2022-31506
SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely
Medium
CVE-2022-2368
Microweber before 1.2.21 allows attacker to bypass IP detection to brute-force password
Medium
CVE-2022-2367
WSM Downloader <- 1.4.0 - Domain Bypass
Medium
CVE-2022-2395
weForms <= 1.6.13 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-2355
Easy Username Updater <= 1.0.3 - Cross-Site Request Forgery to Username Change
Medium
9a83f381-a8ce-472d-a202-f7d7f22fd650
Simple SEO <= 1.7.91 - Reflected Cross-Site Scripting
Critical
8599cb81-4f51-40b5-a0aa-5d27f2ae085d
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Cross-Site Request Forgery to Plugin Settings Update
Medium
85551ba1-6d6e-47a0-864f-f9d0a0a11056
Shortcodes and extra features for Phlox theme <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.