High
CVE-2021-43091
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
CVE-2021-20323
Cross-site Scripting in Keycloak
High
CVE-2022-0983
SQL Injection in Moodle
High
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Medium
CVE-2022-27820
Improper Certificate Validation in OWASP ZAP
Medium
CVE-2022-0145
Cross-site Scripting in Fork CMS
High
CVE-2022-25568
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
Medium
CVE-2022-0955
Cross-site Scripting in Pimcore Datahub
High
CVE-2022-0153
SQL Injection in Fork CMS
High
CVE-2022-1091
Safe SVG <= 1.9.9 - Content-Type Bypass
High
CVE-2022-0315
Use of insecure temporary file in Horovod
Medium
CVE-2022-25612
Simple Event Planner plugin <= 1.5.4 - Cross-Site Scripting
Medium
CVE-2022-25611
Simple Event Planner <= 1.5.4 - Authenticated Stored Cross-Site Scripting
High
CVE-2022-26183
Untrusted Search Path in PNPM
High
CVE-2022-1036
Integer Overflow or Wraparound in Microweber
High
CVE-2022-1034
Unrestricted Upload of File with Dangerous Type in ShowDoc
Critical
CVE-2022-26260
Prototype Pollution in simple-plist
Medium
CVE-2022-0994
Hummingbird <= 3.3.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1560
Amministrazione Aperta <= 3.7.3 - Admin+ Local File Inclusion
High
ghsa-5w9c-rv96-fr7g
Removal of functional code in faker.js
Low
CVE-2022-21718
Renderers can obtain access to random bluetooth device without permission in Electron
High
CVE-2022-25481
Exposure of Resource to Wrong Sphere in ThinkPHP Framework
High
CVE-2022-25766
Command Injection in ungit
Critical
CVE-2022-26960
Path Traversal in Studio-42 elFinder through 2.1.60
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.