Medium
CVE-2022-40312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
2253cb38-3688-4e4d-afd1-582c8743c89a
301 Redirects - Easy Redirect Manager <= 2.72 - Cross-Site Request Forgery via dismiss_notice
Medium
CVE-2023-1112
Drag and Drop Multiple File Upload PRO <= 2.10.9 - Directory Traversal
Medium
CVE-2023-27414
Popup box <= 3.4.4 - Reflected Cross-Site Scripting via 'ays_pb_tab' Parameter
High
CVE-2023-27474
directus vulnerable to HTML Injection in Password Reset email to custom Reset URL
Medium
CVE-2022-41918
OpenSearch has issue with fine-grained access control of indices backing data streams
High
CVE-2023-27522
Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling
Critical
CVE-2023-24775
SQL Injection in Funadmin
Medium
CVE-2023-25806
OpenSearch has time discrepancy in authentication responses
Critical
CVE-2023-24781
SQL Injection in Funadmin
Medium
CVE-2021-36399
Moodle Cross-site Scripting vulnerability
Medium
CVE-2021-36398
Moodle Cross-site Scripting vulnerability
Medium
CVE-2021-36397
Moodle has Incorrect Default Permissions
Medium
CVE-2021-36401
Moodle vulnerable to Stored Cross-site Scripting
Medium
CVE-2021-36403
Moodle has a Hidden Functionality vulnerability
Medium
CVE-2021-36402
Moodle Improper Input Validation vulnerability
Medium
CVE-2021-36400
Moodle has Incorrect Default Permissions
Low
CVE-2022-4134
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.
High
CVE-2023-27891
rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1.
Medium
CVE-2023-1263
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure
High
CVE-2021-36395
Moodle vulnerable to Uncontrolled Resource Consumption
Critical
CVE-2021-36394
Moodle Session Fixation vulnerability
High
CVE-2021-36396
Moodle vulnerable to Server-Side Request Forgery
Critical
CVE-2021-36393
Moodle SQL Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.