Medium
CVE-2022-2925
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-38639
Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting
Medium
CVE-2022-36087
OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI
Critical
CVE-2022-38638
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
High
CVE-2022-28220
Apache James vulnerable to buffering attack
Critical
CVE-2022-25914
com.google.cloud.tools:jib-core vulnerable to Remote Code Execution (RCE)
High
CVE-2022-3427
Corner Ad <= 1.0.56 - Cross-Site Request Forgery
Medium
0004db27-9ea6-4387-ab1d-b95558784ed9
We’re Open! <= 1.37 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-3167
rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames
High
CVE-2022-35513
Blink1Control2 uses weak password encryption
Medium
CVE-2022-40191
Contact Form By Mega Forms <= 1.2.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-40632
wpForo Forum <= 2.0.5 - Cross-Site Request Forgery
High
CVE-2022-2839
Zephyr Project Manager < 3.2.55 - Missing Authorization to Cross-Site Scripting
High
42f54887-ce98-4360-8d07-37b1a48fc3fd
WP Statistics <= 13.2.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2022-38144
wpForo Forum <= 2.0.5 - Cross-Site Request Forgery
High
CVE-2022-4023
3DPrint <= 3.5.6.8 - Cross-Site Request Forgery to Arbitrary File Download
Medium
CVE-2022-2629
Top Bar <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-36356
Culture Object <= 4.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-36082
mangadex-downloader vulnerable to unauthorized file reading
High
CVE-2022-36070
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
High
CVE-2022-36069
Poetry Argument Injection can lead to Local Code Execution
Unrated
drupal-contrib-2022-056
drupal/permissions_by_term - SA-CONTRIB-2022-056
Unrated
drupal-contrib-2022-055
drupal/permissions_by_term - SA-CONTRIB-2022-055
Unrated
drupal-contrib-2022-054
drupal/next - SA-CONTRIB-2022-054
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.