Medium
CVE-2022-0600
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
High
CVE-2022-21716
Twisted SSH client and server deny of service during SSH handshake.
Medium
CVE-2022-24725
Exposure of home directory through shescape on Unix with Bash
Medium
CVE-2022-24723
Leading white space bypasses protocol validation
Medium
CVE-2021-3620
Ansible discloses sensitive information in traceback error message
High
ghsa-v3wr-67px-44xg
Execution with Unnecessary Privileges in arc-electron
Medium
CVE-2022-23395
Prototype Pollution in jquery.cookie
Medium
CVE-2021-38268
Liferay Portal and Liferay DXP has incorrect default permissions for site members
High
CVE-2022-0819
Code injection in dolibarr/dolibarr
Critical
CVE-2022-23640
Improper Restriction of XML External Entity Reference in com.monitorjbl:xlsx-streamer
Medium
CVE-2021-36833
MC4WP: Mailchimp for WordPress <= 4.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-0577
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Medium
CVE-2022-0743
Cross site scripting in getgrav/grav
Medium
CVE-2022-26332
Cross-site Scripting in Cipi
Medium
CVE-2022-0776
Cross site scripting in reveal.js
High
CVE-2022-0777
Rate limit missing in microweber
High
CVE-2022-0818
WooCommerce Affiliate Plugin - Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting
Medium
bd57edf5-a75e-4677-a51e-9dd262eeba4a
MC4WP: Mailchimp for WordPress < 4.8.7 - Cross-Site Scripting
High
CVE-2022-0834
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
Critical
CVE-2022-0787
Limit Login Attempts (Spam Protection) <= 4.9.1 - Unauthenticated SQL Injection
Medium
ghsa-mfjm-vh54-3f96
Scrapy cookie-setting is not restricted based on the public suffix list
Medium
CVE-2022-24717
Cross Site Scripting (XSS) in @finastra/ssr-pages
High
CVE-2022-24718
Path Traversal in @finastra/ssr-pages
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.