Low
ghsa-whpx-q3rq-w8jc
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-39259
Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack
Medium
CVE-2022-31684
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
Critical
CVE-2022-3327
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
Critical
CVE-2022-37298
Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control
High
CVE-2022-44627
Simple SEO <= 1.8.12 - Cross-Site Request Forgery
Medium
CVE-2022-41980
Mantenimiento web <= 0.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3539
Testimonials (Free <= 2.6, Pro < 1.0.7) - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
8f374eea-e6c0-4007-8855-4b1b63335775
LDD Directory Lite - <= 3.5 - Reflected Cross-Site Scripting
High
CVE-2022-36404
Simple SEO <= 1.8.12 - Cross-Site Request Forgery to Sitemap Deletion/Creation
High
CVE-2022-41685
Csomagpontok és szállítási címkék WooCommerce hez <= 1.9.0.2 - Cross-Site Request Forgery
High
CVE-2022-40128
Advanced Order Export For WooCommerce <= 3.3.2 - Cross-Site Request Forgery
Unrated
drupal-contrib-2022-059
drupal/search_api - SA-CONTRIB-2022-059
Medium
CVE-2022-3607
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.
High
CVE-2022-3608
phpMyFAQ vulnerable to Cross-site Scripting
Medium
CVE-2022-43414
Jenkins NUnit Plugin vulnerable to Protection Mechanism Failure
High
CVE-2022-43428
Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin
High
CVE-2022-43407
CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin
High
CVE-2022-43429
Jenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure
Medium
CVE-2022-43423
Agent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin
Medium
CVE-2022-43413
Jenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
Low
CVE-2022-43411
Non-constant time webhook token comparison in Jenkins GitLab Plugin
Medium
CVE-2022-43431
Jenkins Compuware Strobe Measurement Plugin Missing Authorization vulnerability
High
CVE-2022-43409
Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.