Critical
CVE-2022-2754
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-30331
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++
Medium
CVE-2022-2404
WP Popup Builder <= 1.2.8 - Reflected Cross-Site Scripting
High
CVE-2022-2405
WP Popup Builder <= 1.2.9 - Missing Authorization and Cross-Site Request Forgery
High
CVE-2022-2903
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.12 - Authenticated (Administrator+) PHP Objection Injection
High
CVE-2022-3098
Login Block IPs <= 1.0.0 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2022-2352
Post SMTP <= 2.1.6 - Authenticated (Administrator+) Blind Server-Side Request Forgery
High
CVE-2022-38093
All in One SEO <= 4.2.3.1 - Cross-Site Request Forgery
High
CVE-2022-2987
Ldap WP Login / Active Directory Integration <= 3.0.1 - Missing Authorization
Critical
CVE-2021-24890
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-2926
Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal
Medium
CVE-2022-1579
Login Block IPs <= 1.0.0 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-38058
WP Shamsi <= 4.1.1 - Missing Authorization to Plugin Settings Update
Medium
CVE-2022-3074
Slider Hero <= 8.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3135
SEO Smart Links <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-1755
SVG Support <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-3076
CM Download Manager <= 2.8.5 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
Medium
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Critical
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
High
CVE-2022-37435
Apache ShenYu Admin has insecure permissions
Medium
CVE-2022-3072
francoisjacquet/rosariosis vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2022-37339
Meet My Team <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-38070
Pop-up <= 1.1.5 - Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.