Medium
CVE-2022-36390
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
3a0d85e8-33fa-46eb-b71b-d93715bc373e
WPtouch <= 4.3.42 - Reflected Cross-Site Scripting
High
CVE-2022-37405
Better Font Awesome <= 2.0.1 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2022-38059
Access Code Feeder <= 1.0.3 - Missing Authorization
Medium
CVE-2022-35725
wp-forecast <= 7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Unrated
drupal-contrib-2022-053
drupal/commerce_elavon - SA-CONTRIB-2022-053
High
CVE-2021-4041
ansible-runner vulnerable to shell command injection
Medium
CVE-2022-33916
Exposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server
High
CVE-2022-25304
Uncontrolled Resource Consumption in asyncua and opcua
Medium
CVE-2019-25075
Path Traversal in Gravitee API Management
High
CVE-2022-25231
node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit
High
CVE-2022-21208
Uncontrolled Resource Consumption in node-opcua
Medium
CVE-2022-2796
Pimcore Cross-site Scripting (XSS)
Medium
CVE-2022-35278
HTML Injection in ActiveMQ Artemis Web Console
Medium
CVE-2020-35509
Keycloak vulnerable to Improper Certificate Validation
Critical
CVE-2022-37223
SQL injection in jflyfox jfinal
Critical
CVE-2022-37199
SQL injection in jflyfox jfinal
Low
CVE-2022-38665
RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin
Medium
CVE-2022-38664
Cross-site Scripting in Jenkins Job Configuration History Plugin
Medium
CVE-2022-38663
Improper masking of credentials Jenkins in Git Plugin
Medium
CVE-2022-50945
3dady real-time web stats <= 1.0 - Authenticated (Administrator+) Stored Cross Site Scripting
Medium
CVE-2021-3702
ansible-runner vulnerable to Race Condition
Medium
CVE-2021-3701
ansible-runner has default temporary files written to world R/W locations
High
CVE-2022-2930
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.