Medium
CVE-2021-45229
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
CVE-2021-44567
SQL injection in francoisjacquet/rosariosis
Medium
CVE-2021-44566
Cross site scripting in francoisjacquet/rosariosis
Critical
CVE-2021-44550
Access Control vulnerability within CoreNLP
High
CVE-2022-23043
File upload restriction bypass in Zenario CMS
Medium
CVE-2021-44565
Cross site scripting in francoisjacquet/rosariosis
High
CVE-2022-24614
Allocation of Resources Without Limits or Throttling in metadata-extractor
Medium
CVE-2022-24613
Improper Handling of Exceptional Conditions inn metadata-extractor
Medium
CVE-2022-24615
Uncaught Exception in zip4j
Critical
CVE-2022-25098
Arbitrary file delete in ectouch/ectouch
Medium
CVE-2022-25355
EC-CUBE improperly handles HTTP Host header values
High
CVE-2022-25838
Multi-Factor Authentication issue in Laravel Fortify
Medium
CVE-2022-0681
Simple Membership <= 4.0.9 - Cross-Site Request Forgery to Arbitrary Transaction Deletion
Medium
CVE-2022-23653
B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases of the B2 command-line tool version 3.2.0 and below contain a key disclosure vuln
Medium
CVE-2022-23655
Missing server signature validation in OctoberCMS
High
CVE-2022-0654
Cookie exposure in requestretry
High
CVE-2022-0721
Insertion of Sensitive Information Into Debugging Code in Microweber
High
CVE-2022-0724
Insecure Storage of Sensitive Information in Microweber
High
CVE-2022-0719
Cross-site Scripting in Microweber
Medium
CVE-2022-0731
Improper Authorization in dolibarr/dolibarr
Medium
CVE-2022-0750
Photoswipe Masonry Gallery <= 1.2.14 Stored Cross-Site Scripting
Medium
CVE-2022-4932
Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-23651
b2-sdk-python TOCTOU application key disclosure
Medium
CVE-2022-0692
Open Redirect in AllTube
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.