Medium
CVE-2022-23500
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,221
Reset filters
Medium
CVE-2022-34297
Yii2 Gii Cross-site Scripting vulnerability
High
CVE-2022-46157
Akeneo PIM Community Edition vulnerable to remote php code execution
High
ghsa-3fgr-xjr6-xqm8
code injection in phpxmlrpc/phpxmlrpc
Critical
CVE-2022-45152
Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library
Critical
CVE-2022-41705
Badaso vulnerable to Remote Code Execution (RCE)
Medium
CVE-2021-4240
Insufficient Entropy in PHPServerMon PRNG
Medium
CVE-2021-4241
PHPServerMon PRNG has Insufficient Entropy
Medium
CVE-2022-43691
Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information
Medium
CVE-2021-37823
OpenCart SQL injection vulnerability
High
CVE-2022-39369
phpCAS authentication library < 1.6.0 - Service Hostname Discovery Exploitation
Critical
CVE-2022-39365
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Critical
CVE-2022-41711
Badaso vulnerable to Remote Code Execution via malicious file upload
High
CVE-2022-42188
Lavalite vulnerable to Arbitrary File Read via Directory Traversal
Medium
CVE-2022-39314
Kirby CMS vulnerable to user enumeration in the code-based login and password reset forms
Medium
CVE-2021-40694
Moodle Improper Encoding or Escaping of Output
High
CVE-2022-39261
Drupal core - SA-CORE-2022-016
Medium
CVE-2022-36032
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent
Medium
CVE-2022-36104
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Medium
CVE-2022-2925
Appwrite Vulnerable to Cross-site Scripting
Unrated
drupal-contrib-2022-053
drupal/commerce_elavon - SA-CONTRIB-2022-053
High
CVE-2022-51009
PocketMine-MP invalid skin geometry JSON data leading to server crash
Medium
CVE-2022-36376
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
High
ghsa-c8rp-cgf4-937w
mezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header Attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.