Critical
CVE-2015-10009
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2021-4299
string-kit Inefficient Regular Expression Complexity vulnerability
High
CVE-2022-4323
Google Analyticator <= 6.5.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4017
Booster (<= 6.0.0), Booster Plus (<= 6.0.0), and Booster Elite (<= 6.0.0) for WooCommerce - Cross-Site Request Forgery
Medium
CVE-2010-10002
SimpleSAMLphp simplesamlphp-module-openid
High
CVE-2018-25061
rgb2hex vulnerable to inefficient regular expression complexity
Critical
CVE-2017-20160
express-param vulnerable to Improper Handling of Extra Parameters
Medium
CVE-2017-20158
Yii2 FileAPI Widget vulnerable to Cross-site Scripting
Medium
CVE-2022-4868
Froxlor Improper Authorization vulnerability
Critical
CVE-2017-20157
Ariadne Component Library vulnerable to Server-Side Request Forgery
Medium
CVE-2022-4867
Froxlor vulnerable to Cross-Site Request Forgery
Medium
CVE-2022-4864
Froxlor vulnerable to Argument Injection
High
ghsa-q2fj-6h62-59m2
Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue
High
CVE-2022-46178
Path Traversal In MeterSpere leads to upload file to any path
High
CVE-2022-40151
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow
Critical
CVE-2022-44621
Apache Kylin vulnerable to Command injection by Diagnosis Controller
High
CVE-2022-43396
Apache Kylin vulnerable to Command injection by Useless configuration
Critical
CVE-2017-20151
iText RUPS XML External Entity vulnerability
Medium
CVE-2018-25058
Twitter-Post-Fetcher vulnerable to Use of Web Link to Untrusted Target with window.opener Access
High
CVE-2022-41966
XStream can cause Denial of Service via stack overflow
Medium
CVE-2022-4570
Top 10 – Popular posts plugin for WordPress <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blocks
Medium
CVE-2022-4509
Content Control <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4706
Genesis Columns Advanced <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4790
WP Google My Business Auto Publish <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.