High
CVE-2021-44673
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-44585
Cross-site Scripting in jeecg-boot
Medium
CVE-2022-0404
Material Design for Contact Form 7 <= 2.6.4 - Missing Authorization to Arbitrary Settings Update
Medium
954b8064-f317-4af4-a55f-9a61ee945006
WordPress Core < 5.9.2 & Gutenberg < 12.7.2 - Prototype Pollution via Block Editor
Medium
0ddb582a-e966-4c0b-a743-29d8943f846b
WordPress Core 5.9 - 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-20083
WordPress Core < 5.9.1 - jQuery Prototype Pollution
Medium
CVE-2022-24748
Incorrect Authentication in shopware
Medium
CVE-2022-24747
HTTP caching is marking private HTTP headers as public in Shopware
Medium
CVE-2022-24746
HTML injection possibility in voucher code form in Shopware
Low
CVE-2022-24744
Shopware user session is not logged out if the password is reset via password recovery
Medium
CVE-2022-24745
Shopware guest session is shared between customers
High
CVE-2021-38296
Authentication Bypass by Capture-replay in Apache Spark
Critical
CVE-2022-0482
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments
High
CVE-2022-0896
Improper Neutralization of Special Elements Used in a Template Engine in microweber
Medium
2ed1f200-5a27-4905-ac88-394b214bb430
WooCommerce < 6.3.1 - Unauthorized Order Status Change
Unrated
drupal-contrib-2022-029
drupal/opigno_learning_path - SA-CONTRIB-2022-029
Unrated
drupal-contrib-2022-028
drupal/svg_formatter - SA-CONTRIB-2022-028
High
CVE-2022-24739
Server-Side Request Forgery and Open Redirect in AllTube Download
Medium
CVE-2022-0877
Cross-site Scripting in BookStack
High
CVE-2022-0709
Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure
Medium
CVE-2022-0884
Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-27855
Fatcat Apps Analytics Cat <= 1.0.9 - Cross-Site Request Forgery
Critical
CVE-2022-0766
Server-Side Request Forgery in calibreweb
Critical
CVE-2022-0767
Server-Side Request Forgery in calibreweb
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.