Critical
CVE-2022-25767
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2021-40822
GeoServer allows SSRF via the option for setting a proxy host
Medium
CVE-2022-25844
angular vulnerable to regular expression denial of service (ReDoS)
High
CVE-2022-25301
Prototype Pollution in jsgui-lang-essentials
High
CVE-2022-23064
snipe-IT vulnerable to host header injection
Critical
CVE-2022-28056
Incorrect Permission Assignment for Critical Resource in ShopXO
Medium
CVE-2022-1528
VikBooking <= 1.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-1562
Enable SVG <= 1.3.1 - Cross-Site Scripting via SVG
Medium
CVE-2022-1009
Smush – Lazy Load Images, Optimize & Compress Images <= 3.9.8 - Cross-Site Scripting
High
517653e5-fdad-4360-82a5-32b16a6cd631
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) <= 3.0.1 - Cross-Site Scripting
High
CVE-2022-1203
Content Mask <= 1.8.4 - Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2022-1567
WP JS <= 2.0.6 - Reflected Cross-Site Scripting
High
CVE-2023-30839
SQL filter bypass leading to arbitrary write requests using SQL Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
High
CVE-2023-30838
Possible XSS injection through Validate::isCleanHTML method
Medium
CVE-2023-30545
Arbitrary file read via the backoffice Database Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
Medium
CVE-2021-36844
WP Subscribe <= 1.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-29444
Breeze – WordPress Cache Plugin <= 2.0.2 - Unprotected AJAX Actions
Medium
CVE-2010-1459
Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2010-1330
Cross-site Scripting in in JRuby
Medium
CVE-2010-1244
Cross-site request forgery in Apache ActiveMQ
Medium
CVE-2010-1157
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
High
CVE-2010-1153
TYPO3 PHP remote file inclusion vulnerability
Medium
CVE-2010-0828
Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creatin
High
CVE-2010-0717
The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 does not prevent unsafe package actions, which has unspecified impact and attack vectors.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.