Unrated
CVE-2022-42040
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Unrated
CVE-2022-42039
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is
Unrated
CVE-2022-42037
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1
Unrated
CVE-2022-42036
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1
Unrated
CVE-2022-41387
The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.
Unrated
CVE-2022-41386
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is
Unrated
CVE-2022-41385
The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.
Unrated
CVE-2022-41384
The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is
Unrated
CVE-2022-41383
The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected ve
Unrated
CVE-2022-41382
The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected versio
Unrated
CVE-2022-41381
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected ver
Unrated
CVE-2022-41380
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected versio
High
CVE-2022-41032
NuGet Elevation of Privilege Vulnerability
High
CVE-2022-39296
melisplatform/melis-asset-manager vulnerable to Path Traversal
High
CVE-2022-39297
melisplatform/melis-cms vulnerable to deserialization of untrusted data
High
CVE-2022-39298
melisplatform/melis-front vulnerable to deserialization of untrusted data
Medium
CVE-2022-41376
Cross site scripting in Metro UI
High
CVE-2022-42731
django-mfa2 vulnerable to MFA Replay attack
High
CVE-2022-39288
fastify vulnerable to denial of service via malicious Content-Type
Medium
7f447d25-1a38-48fe-8079-5ff425382046
eCommerce Product Catalog Plugin for WordPress <= 3.0.69 - Reflected Cross-Site Scripting
Medium
CVE-2022-40209
WordPress Importer: Import any XML File to WordPress <= 1.0.2 - Reflected Cross-Site Scripting
Low
CVE-2022-37599
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
CVE-2022-37603
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
ghsa-jjmg-x456-w976
Incorrect default cookie name and recommendation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.