High
CVE-2022-31157
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2020-28191
Togglz console missing cross-site request forgery (CSRF) protection
High
CVE-2022-31159
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
High
CVE-2020-10650
jackson-databind vulnerable to unsafe deserialization
Medium
ghsa-6f85-3f8q-qc94
OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor
High
CVE-2022-31142
fastify-bearer-auth vulnerable to Timing Attack Vector
Critical
CVE-2015-8031
Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2
Critical
CVE-2022-35628
SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
Medium
CVE-2021-4178
fabric8 kubernetes-client vulnerable
Critical
CVE-2022-32214
llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields
Critical
CVE-2022-32213
llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
Medium
CVE-2022-2372
YaySMTP – Simple WP SMTP Mail <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
a57675f0-d840-4954-b86e-a9fbc1483bc7
Name Directory <= 1.25.4 - Unauthorized Settings Update
Critical
54901d01-241a-4027-ba72-2b983608f9c6
Advanced Post Manager <= 4.5.1 - PHP Object Injection
Medium
45f32160-36eb-4d66-a6a6-a3d6f2f7bf1a
Ultimate Member <= 2.4.0 - Subscriber+ Stored Cross-Site Scripting
Medium
CVE-2022-2389
Abandoned Cart Recovery for WooCommerce by Autonami <= 2.1.1 - Missing Authorization
High
CVE-2022-31781
Apache Tapestry 5.8.1 vulnerable to ReDoS via Content Types causing catastrophic backtracking
High
CVE-2019-10761
vm2 before 3.6.11 vulnerable to sandbox escape
Medium
CVE-2022-32065
RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module
Medium
CVE-2022-32114
Strapi 4.1.12 Cross-site Scripting via crafted file
High
f4832fbb-94ed-41c4-8434-1972f4d92476
Ultimate Member <= 2.4.1 - Username Enumeration
Medium
CVE-2022-2398
WordPress Comments Fields <= 4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2594
Advanced Custom Fields <= 5.12.2 - File Upload
Low
CVE-2022-25858
terser (JS Package) < 5.14.2 - Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.