Medium
CVE-2013-4752
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2013-7371
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
Medium
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than
Critical
CVE-2013-4409
ReviewBoard and Djblets library are vulnerable to code execution
High
CVE-2013-4251
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
High
CVE-2013-4751
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Medium
CVE-2013-2255
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Medium
CVE-2022-1571
Cross-site Scripting in FacturaScripts
Medium
CVE-2022-1555
Microweber vulnerable to cross-site scripting (XSS)
Critical
CVE-2022-28111
MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter
Medium
CVE-2022-28508
MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php
Medium
CVE-2022-1584
Cross-site Scripting in Microweber
Medium
CVE-2022-30241
Cross-site Scripting in jquery.json-viewer
High
CVE-2022-24901
Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Unrated
drupal-contrib-2022-038
drupal/quick_node_clone - SA-CONTRIB-2022-038
Unrated
drupal-contrib-2022-036
drupal/image_field_caption - SA-CONTRIB-2022-036
Unrated
drupal-contrib-2022-035
drupal/dfp - SA-CONTRIB-2022-035
High
CVE-2022-29429
Code Snippets Extended <= 1.4.7 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2022-29428
WP Slider Plugin <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-29427
Disable Right Click For WP <= 1.1.6 - Cross-Site Request Forgery
Medium
CVE-2021-36912
Andrea Pernici News Sitemap for Google <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-29426
Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting
Medium
CVE-2022-29425
Checkout Files Upload for WooCommerce <= 2.1.2 - Cross-Site Scripting
Medium
CVE-2022-29424
Image Hover Effects Ultimate <= 9.7.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.