Medium
CVE-2022-28889
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-44791
Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters
Medium
CVE-2021-41042
XML External Entity Reference in Eclipse Lyo
Medium
CVE-2022-32061
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
Medium
CVE-2022-32060
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
High
c154cc4b-f0b9-4c3e-8e74-9bfa6de62d2f
Counter Box – WordPress plugin for countdown, timer, counter <= 1.2 - SQL Injection
Medium
CVE-2022-2260
GiveWP – Donation Plugin and Fundraising Platform <= 2.21.2 - Cross-Site Request Forgery
High
CVE-2022-2245
Counter Box <= 1.2 - Cross-Site Request Forgery
High
CVE-2022-2048
Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service
High
CVE-2022-2191
Jetty SslConnection does not release pooled ByteBuffers in case of errors
Low
CVE-2022-2047
Jetty invalid URI parsing may produce invalid HttpURI.authority
Critical
CVE-2022-32533
Insufficient user input in Apache Jetspeed-2
Medium
CVE-2021-37839
Apache Superset allows authenticated users to access metadata they have no permission to
Critical
CVE-2022-33980
Code injection in Apache Commons Configuration
Medium
CVE-2022-2171
Progressive License <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-2170
Microsoft Advertising Universal Event Tracking (UET) <= 1.0.3 - Authenticated Stored Cross-Site Scripting
Medium
741ad2f5-d5cf-44bc-ac4a-7894df77a3d1
Keep Backup Daily <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-1906
Copyright Proof <= 4.16 - Reflected Cross-Site Scripting
Medium
1917eabd-0ba2-4878-87ea-8c0c9c00b6f5
Shortcode For Current Date <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Unrated
747
JUX Timetable x
High
CVE-2022-31112
Protected fields exposed via LiveQuery
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2022-31124
Possible leak of key's raw field if declared length is incorrect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.