Krytyczna
CVE-2022-37614
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 741
Wysoka
CVE-2022-41828
com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution
Średnia
ghsa-2p3c-p3qw-69r4
The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutations
Wysoka
CVE-2022-41404
org.ini4j allows attackers to cause a Denial of Service (DoS)
Średnia
CVE-2022-40440
mxGraph vulnerable to cross-site scripting in setTooltips function
Krytyczna
CVE-2022-37617
thlorenz browserify-shim vulnerable to prototype pollution
Krytyczna
CVE-2022-37611
tschaub gh-pages vulnerable to prototype pollution
Krytyczna
CVE-2022-40664
Apache Shiro Authentication Bypass vulnerability
Średnia
CVE-2022-26375
AB Press Optimizer <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Wysoka
CVE-2022-41134
Optinly <= 1.0.15 - Cross-Site Request Forgery
Średnia
CVE-2022-40697
3com – Asesor de Cookies <= 3.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Wysoka
CVE-2022-41623
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce Premium <= 1.1.0 - Sensitive Information Disclosure
Wysoka
CVE-2022-41647
Optinly <= 1.0.18 - Missing Authorization to Plugin Settings Change
Średnia
CVE-2022-41643
Accessibility <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Średnia
CVE-2022-30545
5 Anker Connect <= 1.2.6 - Reflected Cross-Site Scripting
Średnia
CVE-2022-37601
loader-utils (JS package) < 2.0.3 - Prototype Pollution
Nieoceniona
CVE-2022-42044
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.
Nieoceniona
CVE-2022-42043
The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1
Nieoceniona
CVE-2022-42042
The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected versi
Nieoceniona
CVE-2022-42041
The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected vers
Nieoceniona
CVE-2022-42040
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected versio
Nieoceniona
CVE-2022-42039
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is
Nieoceniona
CVE-2022-42037
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1
Nieoceniona
CVE-2022-42036
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.