Medium
CVE-2022-23800
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
Critical
CVE-2022-23799
Variable Tampering within joomla/input class
Medium
CVE-2018-1000162
Cross-site Scripting in Parsedown
Unrated
drupal-contrib-2022-032
drupal/cleantalk - SA-CONTRIB-2022-032
Critical
CVE-2021-46743
Firebase PHP-JWT < 6.0.0 - Algorithm Confusion
Low
CVE-2022-24784
Discoverability of user password hash in Statamic CMS
High
CVE-2021-26601
Path Traversal in ImpressCMS
Critical
CVE-2021-26600
Type Confusion in ImpressCMS
Critical
CVE-2021-26599
SQL Injection in ImpressCMS
Medium
CVE-2021-26598
Incorrect Access Control in ImpressCMS
Critical
CVE-2021-46433
Sandbox bypass in fenom
Medium
CVE-2022-26980
Cross-site Scripting in teampass
Low
CVE-2019-9942
Twig Sandbox Information Disclosure
High
CVE-2019-18887
Symfony Http-Kernel has non-constant time comparison in UriSigner
Critical
CVE-2020-13756
Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()
Medium
CVE-2020-26138
FormField with square brackets in field name skips validation
High
CVE-2019-10905
Parsedown Class-Name Injection
High
ghsa-3988-h75v-hwf6
Arbitrary shell execution
High
ghsa-mhfv-8rc9-w38c
Arbitrary shell execution
Medium
CVE-2022-25576
Cross-Site Request Forgery in Anchor CMS
High
CVE-2022-1064
SQL Injection in Fork CMS
High
CVE-2021-43091
SQL Injection in Yeswiki
High
CVE-2022-0983
SQL Injection in Moodle
Medium
CVE-2022-0145
Cross-site Scripting in Fork CMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.