Medium
CVE-2022-1673
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2022-1577
Database Backup for WordPress <= 2.5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-24823
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
High
CVE-2022-1631
Incorrect Authorization in microweber
High
CVE-2022-29933
Improper account password reset in Craft CMS
Medium
CVE-2022-1395
Easy FAQ with Expanding Text <= 3.2.8.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1597
WPQA - Builder forms Addon For WordPress <= 5.3 - Reflected Cross-Site Scripting
Medium
58884dcb-dad3-4856-aa54-c5b769d4f9e1
Use Any Font | Custom Font Uploader <= 6.2.7 - Cross-Site Scripting
High
28bdad82-f09a-461f-b826-3f458f121fea
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam <= 2.0.0 - Cross-Site Scripting
Medium
CVE-2022-1566
Quotes llama <= 0.7 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1598
WPQA - Builder forms Addon For WordPress <= 5.4 - Unauthenticated Private Message Disclosure
High
CVE-2018-25033
ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.
Critical
CVE-2022-28470
marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
High
CVE-2022-1611
Bulk Page Creator <= 1.1.3 - Cross-Site Request Forgery to Arbitrary Page Creation
High
CVE-2022-1689
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via Update
Medium
CVE-2022-1645
Amazon Link <= 3.2.10 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1646
Simple Real Estate Pack <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1542
hpb Dashboard <= 1.3.1 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1275
BannerMan <= 0.2.4 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1644
Call&Book Mobile Bar <= 1.2.2 - Authenticated (Admin+) Cross-Site Scripting
Critical
CVE-2022-1692
CP Image Store with Slideshow <= 1.0.67 - Unauthenticated SQL Injection
High
CVE-2022-1691
Realty Workstation <= 1.0.9 - Authenticated SQL Injection
Medium
CVE-2022-0376
User Meta <= 2.4.2 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1583
External Links in New Window / New Tab <= 1.42 - Tabnabbing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.