Medium
ghsa-8r99-h8j2-rw64
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
e20fe2b7-4396-465e-be41-d4e8a069bb74
Image/Banner Widget <= 1.4.5 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2022-3420
Official Integration for Billingo <= 3.3.9 - Reflected Cross-Site Scripting
Medium
23a2fd80-65cb-4e92-978d-c365f08b4c0b
Subpages Extended <= 1.6.6 - Authenticated (Administrator+) Cross-Site Scripting
High
CVE-2012-0796
PHPMailer vulnerable to email header injection
Low
CVE-2022-39284
Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued
Critical
CVE-2018-17057
TCPDF vulnerable to attackers triggering deserialization of arbitrary data
Critical
CVE-2022-41853
HyperSQL DataBase vulnerable to remote code execution when processing untrusted input
Medium
CVE-2022-3376
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
Critical
CVE-2022-3273
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
High
CVE-2022-3389
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.
High
CVE-2022-2986
Moodle Cross-Site Request Forgery (CSRF)
Medium
CVE-2022-3002
YetiForce CRM vulnerable to stored Cross-site Scripting
High
CVE-2022-39280
ReDoS issue in dparse
Medium
CVE-2022-40975
Post Slider <= 1.6.7 - Missing Authorization
Medium
CVE-2022-3408
WP Word Count <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-40130
WP-Polls <= 2.76.0 - Race Condition
Medium
CVE-2022-3402
Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting
Critical
2637e273-a308-4033-be5a-2f778f8df282
Create Block Theme <= 1.2.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-3171
protobuf-java has a potential Denial of Service issue
High
CVE-2022-36551
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the syst
High
CVE-2022-40764
Snyk CLI affected by Command Injection vulnerability
Medium
CVE-2022-32173
OrchardCore vulnerable to HTML injection
Medium
dd108f90-7afc-43e1-86d4-939c1c25fb2d
IP Blacklist Cloud <= 5.00 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.