High
CVE-2012-1156
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2012-2945
Hadoop symlink vulnerability
High
CVE-2022-28366
Denial of service in HtmlUnit-Neko
Medium
CVE-2022-29577
Cross-site Scripting in OWASP AntiSamy
Medium
CVE-2022-28367
Cross-site Scripting in OWASP AntiSamy
High
CVE-2022-1429
SQL Injection found in Pimcore
Medium
CVE-2022-1439
Cross-site Scripting in Microweber
High
CVE-2022-27340
Cross Site Request Forgery in Mingsoft MCMS
Critical
CVE-2022-1440
Command injection in git-interface
High
CVE-2022-1442
Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure
High
CVE-2022-24872
Improper Access Control in Shopware
High
CVE-2022-24871
Server-Side Request Forgery (SSRF) in Shopware
High
CVE-2022-51012
Insufficient type validation in pocketmine/pocketmine-mp
Medium
CVE-2022-24858
NextAuth.js default redirect callback vulnerable to open redirects
Medium
CVE-2022-24849
Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp
High
CVE-2022-24847
Improper Input Validation in GeoServer
Medium
ghsa-cf4q-4cqr-7g7w
SVG with embedded scripts can lead to cross-site scripting attacks in xml2rfc
High
CVE-2022-24845
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<iface>.returns_int128()` is not validated to fall within the bounds of `int128`. Thi
High
CVE-2022-26924
YARP Denial of Service Vulnerability
High
CVE-2022-24828
Missing input validation can lead to command execution in composer
Medium
CVE-2011-2487
Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J
Medium
CVE-2011-1150
bbPress Cross-site Scripting (XSS) vulnerability
Critical
CVE-2011-4943
ImpressPages CMS RCE
Critical
CVE-2011-2715
Drupal SQL Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.