Medium
CVE-2022-29432
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2022-29431
Remove CPT base <= 5.8 - Cross-Site Request Forgery to CPT base deletion
High
CVE-2022-29430
PNG to JPG <= 5.8 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Critical
CVE-2022-30284
** DISPUTED ** In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments). NOTE: the vendor believes
Critical
CVE-2022-28890
XML External Entity Reference in apache jena
Medium
CVE-2022-1411
Unrestricted Upload of File with Dangerous Type in yetiforce-crm
Medium
CVE-2022-1527
WP 2FA – Two-factor authentication for WordPress <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4905
WP-Stateless – Google Cloud Storage <= 3.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
ghsa-52rh-5rpj-c3w6
Improper handling of multiline messages in node-irc
Medium
CVE-2013-0331
Jenkins Vulnerable to Denial of Service (DoS) via Crafted Payload
Medium
CVE-2013-0330
Jenkins allows Remote Users to Build Arbitrary Jobs
Medium
CVE-2013-0328
Jenkins subject to Cross-site Scripting
Medium
CVE-2013-0327
Jenkins Cross-Site Request Forgery vulnerability
Medium
CVE-2013-0329
Jenkins Cross-Site Request Forgery vulnerability
Medium
CVE-2013-0305
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated ad
Medium
CVE-2013-0306
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of serv
Low
CVE-2013-0248
Incorrect Default Permissions in Apache Commons FileUpload
Medium
CVE-2013-0239
Improper Authentication in Apache CXF
Low
CVE-2013-0158
Jenkins allows attackers to obtain the master cryptographic key
Medium
CVE-2013-7489
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
Medium
CVE-2013-4791
PrestaShop Stored Cross-Site Scripting Vulnerability
High
CVE-2013-0294
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute forc
Medium
CVE-2013-6430
Improper Neutralization of Input During Web Page Generation in Spring Framework
Medium
CVE-2013-7062
Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote at
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.