Critical
CVE-2022-1013
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2022-0814
Ubigeo de Perú para Woocommerce y WordPress <= 3.6.3 - Unauthenticated SQL Injection
High
CVE-2022-0592
MapSVG <= 6.2.19 - SQL Injection
Medium
CVE-2022-1380
Cross-site Scripting in snipe-it
Critical
CVE-2022-0771
SiteSuperCharger <= 5.1.10 - Unauthenticated SQL Injection
Medium
3e471ef4-94c1-47d9-98ae-f79f7662e21a
Woocommerce Open Close – Best Business Schedules Manager <= 4.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-26594
Liferay Portal and Liferay DXP allows arbitrary injection via form field
High
CVE-2022-26788
PowerShell Elevation of Privilege Vulnerability
Medium
CVE-2022-26907
Azure SDK for .NET Information Disclosure Vulnerability.
High
CVE-2022-24279
Prototype Pollution in madlib-object-utils
High
CVE-2022-24857
Improper Authentication in django-mfa3
Medium
CVE-2022-27852
KB Support – WordPress Help Desk <= 1.5.5 - Multiple Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-36828
WP Maintenance <= 6.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-27850
Simple Ajax Chat <= 20220115 - Cross-Site Request Forgery
Medium
CVE-2022-27849
Simple Ajax Chat Plugin <= 20220115 - Sensitive Information Disclosure
Medium
CVE-2022-1351
Cross-site Scripting in Pimcore
High
CVE-2021-43257
MantisBT CSV Injection unprivileged user access in csv_export.php
High
CVE-2022-22968
Improper handling of case sensitivity in Spring Framework
Medium
CVE-2021-36847
Webba Booking <= 4.2.21 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
6ebc1b85-4682-4467-b17c-9a35cc3f0f15
Shopping Cart & eCommerce Store <= 5.2.6 - Cross-Site Request Forgery
Medium
CVE-2022-26144
MantisBT vulnerable to XSS due to improper escape in manage_plugin_page.php and manage_plugin_uninstall.php
Medium
CVE-2020-29653
HTML Injection in Froxlor
High
CVE-2022-1339
SQL Injection in Pimcore
Critical
CVE-2022-27479
Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.