High
CVE-2022-3537
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2022-3494
Complianz Free <= 6.3.3 & Premium <= 6.3.5 - SQL Injection via Translations
Medium
56abcad2-5be0-422c-a33f-91bc123364e5
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting
High
CVE-2022-3558
Import and export users and customers <= 1.20.4 - Authenticated (Subscriber+) CSV Injection
High
CVE-2022-3489
WP Hide <= 0.0.2 - Missing Authorization to Settings Update
Medium
CVE-2022-2711
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal
High
CVE-2022-3451
Product Stock Manager < 1.0.5 - Missing Authorization and Cross-Site Request Forgery
High
0593311a-54d7-42b2-ad5e-185938b42452
Portfolio Gallery <= 1.0 - Missing Authorization
High
CVE-2022-41323
In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular
Medium
CVE-2022-35689
Magento Open Source allows Improper Access Control
High
CVE-2022-35698
Magento Open Source allows Stored Cross-Site Scripting (Stored XSS)
Critical
CVE-2022-3439
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Critical
CVE-2022-3456
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Critical
CVE-2022-3457
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.
Critical
CVE-2022-37602
Grunt-karma vulnerable to prototype pollution
High
CVE-2022-35944
October CMS Safe Mode bypass leads to authenticated Remote Code Execution
Critical
CVE-2022-42889
Arbitrary code execution in Apache Commons Text
Medium
CVE-2022-3462
Highlight Focus <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-41656
Account Manager for WooCommerce <= 2.1.1 - Missing Authorization
Medium
CVE-2022-3484
WPB Show Core <= 2.2 - Reflected Cross-Site Scripting
High
CVE-2022-41136
Shortcodes Ultimate <= 5.12.0 - Cross-Site Request Forgery
High
CVE-2022-40131
Page View Count <= 2.5.5 - Cross-Site Request Forgery
Medium
2ac1d65c-5e09-41ca-809b-2ab3ab5f62af
Shortcodes Ultimate <= 5.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-39300
Signature bypass via multiple root elements
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.