High
83f6bdda-e489-4e85-b510-7bfaa2329609
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-2194
Accept Stripe Payments <= 2.0.63 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2022-1609
The School Management Pro <= 9.9.6 - Remote Code Execution
Medium
CVE-2022-2340
W-DALIL <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2100
Page Generator <= 1.6.4 - Cross-Site Scripting
Medium
CVE-2022-2090
Discount Rules for WooCommerce <= 2.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-2341
Simple Page Transition <= 1.4.1 - Stored Cross Site Scripting
Medium
CVE-2022-2187
Contact Form 7 Captcha <= 0.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-2222
Download Monitor <= 4.5.9 - Authenticated Arbitrary File Download
Critical
0a9b4c03-e7ec-48d6-87fe-67e8a5780703
a3 Responsive Slider <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
ba5d1bd4-da0d-43f4-b28f-4a4a2702b3b0
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.6.9 - Cross-Site Scripting
High
CVE-2022-25898
JWS and JWT signature validation vulnerability with special characters
Low
CVE-2022-30120
Cross site scripting in Concrete CMS
Critical
CVE-2022-30117
Path traversal in Concrete CMS
High
CVE-2022-21829
Code injection in concrete CMS
Medium
CVE-2022-33910
MantisBT XSS through crafted SVG documents in file_download.php
High
CVE-2022-21231
Prototype Pollution in deep-get-set
Medium
CVE-2022-0899
Header Footer Code Manager <= 1.1.23 - Cross-Site Scripting
Unrated
CVE-2022-34061
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency
Unrated
CVE-2022-34054
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and d
Unrated
CVE-2022-33004
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and
Unrated
CVE-2022-33000
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information an
Unrated
CVE-2022-32998
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive us
Unrated
CVE-2022-32997
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user inform
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.