High
CVE-2022-45199
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2022-45198
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
High
CVE-2022-3677
Advanced Import <= 1.3.7 - Cross-Site Request Forgery
Medium
CVE-2022-2536
Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass
High
CVE-2022-2942
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Cross-Site Request Forgery to Settings update
High
CVE-2022-3747
Becustom <= 1.0.5.2 - Cross-Site Request Forgery
Critical
CVE-2022-3856
Comic Book Management System < 2.2.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-3991
Photospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-3240
Follow Me Plugin <= 3.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-2940
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-3858
Floating Chat Widget - Chaty <= 3.0.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-3978
NodeBB vulnerable to Cross-Site Request Forgery
Medium
CVE-2022-3971
Matrix-appservice-irc vulnerable to sql injection via roomIds argument
Medium
CVE-2022-3975
NukeView CMS vulnerable to Cross-site Scripting
Medium
CVE-2022-3846
Workreap < 2.6.3 - Insecure Direct Objection Reference to Private Message Disclosure
High
CVE-2022-41905
Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled
Medium
CVE-2022-41854
Snakeyaml vulnerable to Stack overflow leading to denial of service
High
CVE-2022-3952
ManyDesigns Portofino subject to creation of insecure temporary file
High
CVE-2022-41892
Arches vulnerable to execution of arbitrary SQL
High
CVE-2022-26366
AdRotate Banner Manager <= 5.9 - Cross-Site Request Forgery
Medium
CVE-2022-44630
YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery
Medium
CVE-2022-3922
Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45075
Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization
High
CVE-2022-1540
PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.