Medium
CVE-2022-2462
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-2371
YaySMTP – Simple WP SMTP Mail <= 2.2 - Stored Cross-Site Scripting
High
CVE-2022-2046
Directorist <= 7.2.2 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2022-2425
WP DS Blog Map <= 3.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2426
Thinkific Uploader <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
801132f5-e4ea-4d56-8429-9f33896f6dff
My Calendar <= 3.3.16 - Administrator+ Stored Cross-Site Scripting
Critical
CVE-2022-2460
WPDating <= 7.4.0 - SQL Injection
Medium
CVE-2022-2410
mTouch Quiz <= 3.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-34839
WP OAuth2 Server <= 1.0.1 - Authentication Bypass
High
CVE-2022-33901
MultiSafepay plugin for WooCommerce <= 4.15.0 - Arbitrary File Read
High
CVE-2022-2438
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2022-2411
Auto More Tag <= 4.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2461
Transposh WordPress Translation <= 1.0.9.6 - Unauthorized Settings Change
Medium
CVE-2022-2386
Crowdsignal Dashboard – Polls, Surveys & more <= 3.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2022-2424
Google Maps Anywhere <= 1.2.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-34538
Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
Critical
CVE-2021-36711
Octobot mishandles Tentacles upload
Medium
CVE-2022-25869
Angular (deprecated package) Cross-site Scripting
Critical
CVE-2022-31180
Shescape vulnerable to insufficient escaping of whitespace
High
CVE-2022-31179
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Medium
ghsa-q37h-jhf3-85cj
Bypass of CMS Safe Mode Security Feature
High
CVE-2021-3859
Undertow vulnerable to Denial of Service (DoS) attacks
High
CVE-2021-3690
Undertow vulnerable to memory exhaustion due to buffer leak
High
CVE-2022-31158
LTI 1.3 Tool Library's Nonce Claim Value not validated against nonce value sent in Authentication Request before v5.0
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.