Medium
CVE-2022-1777
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2022-31268
Path traversal in Gitblit
Critical
CVE-2022-31267
Unescaped control characters in Gitblit
Medium
5ee19031-1e48-43b6-b492-980f2610f6cc
ProductX – Gutenberg WooCommerce Blocks – WooCommerce Builder, Wishlist for WooCommerce, Products Comparison, Quick View, Online Store – All in One Solution <= 2.2.5 - Multiple Cross-Site Scripting
High
CVE-2022-1801
Very Simple Contact Form <= 11.5 - Captcha Bypass
Medium
CVE-2022-29440
Promotion Slider <= 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-28990
WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm.
Medium
CVE-2022-21195
Regular expression denial of service in url_regex
High
CVE-2022-24434
Crash in HeaderParser in dicer
Medium
7c4ceb2e-c718-43e2-bb7b-ab0404271134
Passwords Manager <= 1.4.4 - Cross-Site Scripting via pwdms_csv_category parameter
High
CVE-2022-24899
Cross site scripting via canonical tag in Contao
Critical
CVE-2022-22978
Authorization bypass in Spring Security
Medium
CVE-2022-22976
Integer overflow in BCrypt class in Spring Security
High
CVE-2021-41938
Arbitrary file upload in ShopXO
High
CVE-2022-30618
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
High
CVE-2022-30617
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Critical
CVE-2022-1800
Export any WordPress data to XML/CSV <= 1.3.4 - Authenticated SQL Injection
Medium
CVE-2022-29230
Potential Cross-site Scripting vulnerability in Hydrogen
Critical
CVE-2022-1782
Cross-site Scripting in com.erudika:para-core
Critical
CVE-2022-30600
Incorrect Calculation in moodle
Medium
CVE-2022-30598
Exposure of Sensitive Information in moodle
Medium
CVE-2022-30597
External Control of Assumed-Immutable Web Parameter in moodle
Medium
CVE-2022-30596
Cross-site Scripting in moodle
Critical
CVE-2022-30599
SQL injection in moodle
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.