High
CVE-2022-36417
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-38134
Customer Reviews for WooCommerce <= 5.3.5 - Multiple Unprotected AJAX Actions
Medium
CVE-2022-38470
Customer Reviews for WooCommerce <= 5.3.5 - Cross-Site Request Forgery
Medium
CVE-2022-40194
Customer Reviews for WooCommerce <= 5.3.5 - Sensitive Data Exposure
Medium
CVE-2022-3082
miniOrange Discord Integration <= 2.1.5 - Missing Authorization to Plugin Options Update
High
ghsa-6h2x-4gjf-jc5w
autogluon.multimodal vulnerable to unsafe YAML deserialization
Medium
CVE-2022-39239
@netlify/ipx vulnerable to Full Response SSRF and Stored XSS via Cache Poisoning and Improper Host Validation
Low
CVE-2022-39231
parse-server auth adapter app ID validation can be circumvented
Medium
CVE-2022-39230
fhir-works-on-aws-authz-smart handles permissions improperly
Medium
CVE-2022-39225
parse-server's session object properties can be updated by foreign user if object ID is known
High
CVE-2022-34917
Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service
Medium
CVE-2022-3242
Microweber Cross-site Scripting can result in redirection to a malicious site
Medium
CVE-2022-3005
YetiForce CRM vulnerable to stored Cross-site Scripting via SlaPolicy module
Medium
CVE-2022-3004
YetiForce CRM vulnerable to stored Cross-site Scripting via WorkFlow module
Medium
CVE-2022-3000
YetiForce CRM vulnerable to stored Cross-site Scripting via LayoutEditor module
Medium
CVE-2022-2924
YetiForce CRM vulnerable to stored Cross-site Scripting via WidgetsManagement module
High
CVE-2022-40955
Apache InLong vulnerable to Deserialization of Untrusted Data
Medium
CVE-2022-3245
Microweber vulnerable to HTML Injection in create tag functionality
Critical
CVE-2022-38916
Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
High
CVE-2022-39974
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.
Critical
CVE-2022-37265
steal vulnerable to Prototype Pollution via alias variable
High
CVE-2022-37259
steal Inefficient Regular Expression Complexity vulnerability via string variable
High
CVE-2022-41996
Avada <= 7.8.1 - Cross-Site Request Forgery
High
CVE-2022-3150
WP Custom Cursors <= 3.0.1 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.