High
CVE-2022-39299
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2024-23679
com.enonic.xp:lib-auth vulnerable to Session Fixation
Unrated
drupal-contrib-2022-058
drupal/twig_field_value - SA-CONTRIB-2022-058
Critical
CVE-2022-40871
Dolibarr vulnerable to Eval Injection
Critical
CVE-2022-37614
mockery is vulnerable to prototype pollution
High
CVE-2022-41828
com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution
Medium
ghsa-2p3c-p3qw-69r4
The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutations
High
CVE-2022-41404
org.ini4j allows attackers to cause a Denial of Service (DoS)
Medium
CVE-2022-40440
mxGraph vulnerable to cross-site scripting in setTooltips function
Critical
CVE-2022-37617
thlorenz browserify-shim vulnerable to prototype pollution
Critical
CVE-2022-37611
tschaub gh-pages vulnerable to prototype pollution
Critical
CVE-2022-40664
Apache Shiro Authentication Bypass vulnerability
Medium
CVE-2022-26375
AB Press Optimizer <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41134
Optinly <= 1.0.15 - Cross-Site Request Forgery
Medium
CVE-2022-40697
3com – Asesor de Cookies <= 3.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41623
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce Premium <= 1.1.0 - Sensitive Information Disclosure
High
CVE-2022-41647
Optinly <= 1.0.18 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-41643
Accessibility <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-30545
5 Anker Connect <= 1.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-37601
loader-utils (JS package) < 2.0.3 - Prototype Pollution
Unrated
CVE-2022-42044
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.
Unrated
CVE-2022-42043
The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1
Unrated
CVE-2022-42042
The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected versi
Unrated
CVE-2022-42041
The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected vers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.