High
CVE-2021-3461
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
Medium
CVE-2022-22950
Allocation of Resources Without Limits or Throttling in Spring Framework
Medium
CVE-2022-21830
Cross-site Scripting in @rocket.chat/livechat
Critical
Exploited in attacks
CVE-2022-22963
Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression
Critical
CVE-2021-44135
SQL injection in pagekit/pagekit
High
CVE-2022-24066
Command injection in simple-git
Medium
ee5e1262-193c-480b-bc27-481c961c7c47
Quick Adsense < 2.8.2 - Missing Authorization
Critical
CVE-2022-27177
Use of Externally-Controlled Format String in consoleme
High
CVE-2022-24802
Prototype Pollution in deepmerge-ts
High
ghsa-xhr8-mpwq-2rr2
Automatic named constructor discovery in Valinor
Medium
ghsa-6v6p-g8cg-2hgg
Improper Certificate Validation in node-sass affects eZ Platform
Medium
CVE-2021-43142
Improper Restriction of XML External Entity Reference in wutka jox
High
CVE-2021-36625
SQL Injection in Dolibarr
High
CVE-2021-37517
Access Control vulnerability in Dolibarr
Medium
CVE-2022-0350
Cross-site Scripting in vditor
High
CVE-2021-34257
Unrestricted Upload of File with Dangerous Type in WPanel 4
High
CVE-2022-1176
Type Confusion in LiveHelperChat
High
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
High
CVE-2022-24794
URL Redirection to Untrusted Site ('Open Redirect') in express-openid-connect
Critical
Exploited in attacks
CVE-2022-22965
Remote Code Execution in Spring Framework
High
CVE-2022-1155
Old sessions not blocked by login enable function in Snipe-IT
High
CVE-2022-23793
Path Traversal within joomla/archive tar class
Medium
CVE-2022-23794
Path Disclosure within joomla/filesystem class
Medium
CVE-2022-23800
Cross-site Scripting (XSS) within joomla/filter class
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.