Medium
2a4d8b76-8fb0-4239-ac4b-4ef4428be02b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-35916
OpenZeppelin Contracts's Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls
Medium
CVE-2022-35915
OpenZeppelin Contracts ERC165Checker unbounded gas consumption
Medium
CVE-2022-38180
JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider
Medium
CVE-2022-38179
JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack
Medium
CVE-2022-2390
Google Play Services SDK leads to apps having incorrectly set mutability flag
Medium
CVE-2022-35589
ForkCMS XSS via `publish_on_time` parameter
Medium
CVE-2022-35587
ForkCMS XSS via `publish_on_date` parameter
Medium
CVE-2022-35590
ForkCMS XSS via `end_date` parameter
Medium
CVE-2022-35585
ForkCMS stored XSS via `start_date` parameter
Medium
e3702936-9ae2-4efb-bdfe-9e1dfceb246b
Protect uploads <= 0.3 - Authorization Bypass
High
CVE-2022-35980
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
Medium
CVE-2022-37423
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
Medium
CVE-2022-2777
Microweber's title parameter in the body of POST request vulnerable to stored XSS
High
CVE-2022-29476
Notification Bar for WordPress <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-36347
Alpine PhotoTile for Pinterest <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-34648
Uploading SVG, WEBP and ICO files <= 1.0.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-35242
THE Leads Management System: 59sec LITE <= 3.4.1 - Authorization Bypass
High
CVE-2022-36285
Uploading SVG, WEBP and ICO files <= 1.0.1 - Arbitrary File Upload
Medium
CVE-2022-36376
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
Critical
CVE-2022-35942
loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter
High
ghsa-pcjh-6r5h-r92r
django-sendfile2 before 0.7.0 contains reflected file download vulnerability
Medium
ghsa-7r9x-qrpr-3cxw
mofh Vulnerable to Improper Restriction of XML External Entity Reference
Medium
CVE-2022-35697
AEM WCM Core Components CVG Image vulnerable to Reflected Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.