Medium
CVE-2020-36608
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-3823
Beautiful Cookie Consent Banner <= 2.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3839
Analytics for WP <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3603
Export customers list csv for WooCommerce <= 2.0.67 - CSV Injection
High
CVE-2022-3852
VR Calendar <= 2.3.3 - Cross-Site Request Forgery
Medium
CVE-2022-3833
Fancier Author Box by ThematoSoup <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
892a1983-018b-480d-adab-29c32fd88be5
Photo Gallery by 10Web <= 1.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-3834
Google Forms <= 0.95 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3847
Showing URL in QR Code <= 0.0.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-3831
reCAPTCHA <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
217d68dc-6133-4b7e-9d8f-bb8fc18f1c12
001 Prime Strategy Translate Accelerator <= 1.1.1 - Missing Authorization
Medium
CVE-2022-3601
Image Hover Effects Css3 <= 4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-43982
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.
Medium
CVE-2022-43985
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.
Critical
CVE-2022-3827
Centreon vulnerable to SQL Injection
Medium
CVE-2022-43670
Apache Sling App CMS vulnerable to Cross-site Scripting
Medium
ghsa-8r69-3cvp-wxc3
Batched HTTP requests may set incorrect `cache-control` response header
Medium
ghsa-39hc-v87j-747x
Vulnerable OpenSSL included in cryptography wheels
High
CVE-2022-39381
Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp
Medium
CVE-2022-3828
Video Thumbnails <= 2.12.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-3769
OWM Weather <= 5.6.8 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2022-44586
AM-HiLi <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3610
Jeeng Push Notifications <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
8551ae2f-4be4-4dc6-952d-1d25ae127150
Jeeng Push Notifications <= 2.0.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.