High
CVE-2022-3295
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-3301
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.
Medium
CVE-2022-21169
express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute
Medium
CVE-2022-40044
Centreon contains cross-site scripting vulnerability via esc_name parameter
High
CVE-2022-40043
Centreon SQL Injection vulnerability via esc_name parameter
High
CVE-2022-3272
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
High
CVE-2022-3298
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
Medium
CVE-2022-40218
TH Advance Product Search <= 1.1.4 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-3622
Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
f52f6d55-d0f5-4eba-bc07-ed94bded8777
Sabai Discuss <= 1.4.13 - Reflected Cross-Site Scripting
Medium
CVE-2022-38057
TH Advance Product Search <= 1.1.4 - Missing Authorization to Plugin Settings Reset
Medium
CVE-2021-36839
Social Media Follow Buttons Bar <= 4.73 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-34654
Manage Notification E-mails <= 1.8.2 - Cross-Site Request Forgery to Plugin Options Update
Medium
CVE-2022-41638
Pop-Up Chop Chop <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-35730
Oceanwp sticky header <= 1.0.8 - Cross-Site Request Forgery to Plugin Settings Update
Medium
24349a73-d543-433b-9f7c-b12f914fc80f
Forym <= 1.5.8 - Reflected Cross-Site Scripting
High
CVE-2022-3290
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
Medium
CVE-2022-40205
wpForo Forum <= 2.0.5 - Insecure Direct Object Reference to Forum Status Change
High
CVE-2022-41343
Dompdf allows remote file inclusion because URI validation failure does not halt font registration
Medium
CVE-2022-4381
Popup Maker <= 1.16.8 - Authenticated (Contributor+) Cross-Site Scripting
Medium
eb0b9c2b-c536-4697-be4c-7557ba66c2c4
WPML <= 4.5.10 - Unprotected AJAX Actions
Medium
CVE-2022-41155
iQ Block Country <= 1.2.18 - Country Blocking Bypass
Medium
CVE-2022-2574
Meks Easy Social Share <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
8f7b0a1c-16d7-45db-b419-569ed5c4a5e4
Make, formerly Integromat Connector <= 1.5.2 - Authenticated (Subscriber+) Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.