High
CVE-2022-2354
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
CVE-2022-31181
Chain: SQL Injection (CWE-89) and Eval Injection (CWE-95)
Medium
CVE-2022-2495
Microweber Stored Cross-site Scripting before v1.2.20
Medium
CVE-2022-2470
Microweber before 1.2.21 vulnerable to reflected XSS
Critical
CVE-2022-25759
convert-svg-core vulnerable to remote code injection
Critical
CVE-2022-34113
Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
Critical
CVE-2022-34115
Dataease v1.11.1 SQL Injection via parameter dataSourceId
High
CVE-2022-34114
SQL Injection found in Dataease
Medium
CVE-2022-34112
Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
High
CVE-2022-3141
TranslatePress <= 2.3.2 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2022-34983
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
Unrated
CVE-2022-34982
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
Unrated
CVE-2022-34981
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
High
CVE-2022-34867
WP Libre Form 2 <= 2.0.8 - Sensitive Information Disclosure
High
CVE-2022-36313
file-type vulnerable to Infinite Loop via malformed MKV file
High
CVE-2022-32430
Hardcoded JWT Token in Lin CMS Spring Boot
Medium
e532a2b4-0fb4-4256-89a9-435b55d9de91
WordPress Membership, User Registration, Login Form, User Profile & Restrict Content Plugin – ProfilePress <= 3.2.15 - Reflected Cross-Site Scripting
Medium
CVE-2022-25811
Transposh WordPress Translation <= 1.0.9.1 - Authenticated (Admin+) SQL Injection via 'tp_editor'
Medium
CVE-2021-24910
Transposh WordPress Translation <= 1.0.7 - Reflected Cross-Site Scripting via tp_tp
High
CVE-2022-25812
Transposh WordPress Translation <= 1.0.9.1 - Remote Code Execution
Critical
CVE-2022-2314
VR Calendar <= 2.3.1 - Unauthenticated Remote Code Execution
Medium
CVE-2021-24912
Transposh WordPress Translation <= 1.0.9.1 - Cross-Site Request Forgery
Medium
CVE-2021-24911
Transposh WordPress Translation <= 1.0.7 - Unauthenticated Stored Cross-Site Scripting via 'tp_translation'
High
CVE-2022-2518
Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.