High
CVE-2022-2256
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-2443
FreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-0598
Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2278
Featured Image from URL (FIFU) <= 4.0.0 - Stored Cross-Site Scripting
Medium
CVE-2022-2305
Popups <= 1.9.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2325
Invitation Based Registrations <= 2.2.84 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-2435
AnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Medium
CVE-2022-0594
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic <= 9.7.5 - Information Disclosure
Medium
cf44a96e-0efb-4363-9f49-ba4a82924569
Video Lightbox <= 1.9.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-2299
Allow SVG Files <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
a1513296-f7f6-468c-ac96-5f55812d943e
Ivory Search <= 5.4.6 - Reflected Cross-Site Scripting
Medium
752caefe-7e87-4d4f-89e0-fbd28e4076c4
NextScripts: Social Networks Auto-Poster <= 4.3.25 - Reflected Cross-Site Scripting
Medium
0fe5a834-487e-4da8-8b30-384427e26e6b
Booster for WooCommerce <= 5.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2022-2115
Popup Anything – A Marketing Popup and Lead Generation Conversions <= 2.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-2280
Cross-site Scripting in microweber
Critical
CVE-2022-31943
Unrestricted Upload of File with Dangerous Type in MCMS
Medium
CVE-2022-25896
Passport vulnerable to session regeneration when a users logs in or out
Medium
CVE-2022-25876
Server-Side Request Forgery in link-preview-js
High
CVE-2022-25900
Command injection in git-clone
High
CVE-2022-25758
Regular expression denial of service in scss-tokenizer
Critical
CVE-2022-31605
Unsafe yaml deserialization in NVFlare
Critical
CVE-2022-31604
Unsafe deserialisation in the PKI implementation scheme of NVFlare
Critical
CVE-2021-40663
Prototype Pollution in deep.assign
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.