Medium
CVE-2022-40001
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-40000
FeehiCMS Cross Site Scripting vulnerability
Medium
CVE-2021-36573
FeehiCMS Unrestricted Upload vulnerability
Medium
CVE-2021-36572
FeehiCMS Cross Site Scripting vulnerability
Critical
CVE-2021-4245
npm package rfc6902 vulnerable to Prototype Pollution
Critical
CVE-2021-33420
replicator vulnerable to Deserialization of Untrusted Data
Medium
CVE-2020-24855
easywebpack-cli Path Traversal vulnerability
Medium
CVE-2020-36607
FeehiCMS Cross Site Scripting vulnerability
Medium
CVE-2020-20589
FeehiCMS vulnerable to Cross Site Scripting
Medium
CVE-2022-4521
WSO2 carbon-registry vulnerable to Cross-site Scripting
Medium
CVE-2022-4520
WSO2 carbon-registry Cross-site Scripting vulnerability
Medium
CVE-2022-4526
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photo_detail
Medium
CVE-2022-4527
A vulnerability was found in collective.task up to 3.0.9. It has been classified as problematic. This affects the function renderCell/AssignedGroupColumn of the file src/collective/task/browser/table.
Medium
CVE-2022-4524
Roots Soil plugin vulnerable to Cross-site Scripting
Medium
CVE-2022-32531
Apache Bookkeeper vulnerable to Improper Certificate Validation
Medium
CVE-2022-4103
Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation
Medium
CVE-2022-4368
WP CSV <= 1.8.0.0 - Reflected Cross-Site Scripting
High
CVE-2022-4102
Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
15d479e7-f0b8-4175-84b0-cd611b73233a
Portfolio – WordPress Portfolio Plugin <= 2.8.8 - Cross-Site Request Forgery in rtport_spare_me
High
CVE-2022-47163
WP CSV to Database <= 2.6 - Cross-Site Request Forgery
Medium
CVE-2022-3855
404 to Start <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41089
.NET Remote Code Execution Vulnerability
Medium
CVE-2022-47407
TYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension "Master-Quiz" (fp_masterquiz)
High
CVE-2022-47411
"Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.