Medium
CVE-2022-21694
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-21692
Improper Access Control in Onionshare
Medium
CVE-2022-21690
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend
Medium
CVE-2022-21695
Improper Access Control in Onionshare
Medium
CVE-2022-21693
Path traversal in Onionshare
Medium
CVE-2022-21691
Improper Access Control in Onionshare
High
CVE-2022-21689
Denial of Service in Onionshare
High
CVE-2022-21688
Out-of-bounds Read in Onionshare
Medium
CVE-2022-21696
Username spoofing in OnionShare
Medium
CVE-2022-21683
Comment reply notifications sent to incorrect users
Medium
CVE-2021-25099
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
High
CVE-2022-29454
Better Messages <= 1.9.9.148 - Cross-Site Request Forgery
High
df015a51-7eb8-4fbc-839f-bcf6b2e2b1a7
AccessPress Social Icons 1.8.2 - Backdoor
Medium
CVE-2021-25060
Five Star Business Profile and Schema <= 2.1.6 - Subscriber+ Page Creation & Settings Update to Stored Cross-Site Scripting
Medium
CVE-2022-0186
Image Photo Gallery Final Tiles Grid <= 3.5.2 - Contributor+ Stored Cross-Site Scripting
Medium
CVE-2021-25100
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
High
CVE-2022-36389
Better Messages <= 1.9.9.148 - Cross-Site Request Forgery
Medium
CVE-2021-25055
FeedWordPress <= 2021.0713 - Reflected Cross-Site Scripting
Medium
CVE-2021-25057
Translation Exchange <= 1.0.14 - Stored Cross-Site Scripting
Medium
CVE-2022-0232
User Registration, Login & Landing Pages <= 1.2.7 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0252
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting via Import Tool
Medium
CVE-2021-25058
The Buffer Button <= 1.0 - Cross-Site Scripting
Medium
CVE-2022-0233
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 - Stored Cross-Site Scripting via Profile
Medium
CVE-2021-25033
WordPress Newsletter Plugin – Noptin < 1.6.5 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.