Medium
961cf553-8871-436d-af95-61af963f5e9d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-1028
WordPress Security <= 4.2 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1321
miniOrange's Google Authenticator <= 5.5.5 - Authenticated (Admin+) Cross-Site Scripting
Critical
CVE-2022-0444
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.16 - Unauthenticated Plugin Settings Reset
Medium
7681a661-21bd-42fb-ac97-1da808435520
Qubely <= 1.7.8 - Missing Authorization
Medium
CVE-2022-1994
Login With OTP Over SMS, Email, WhatsApp and Google Authenticator <= 1.0.7 - Cross-Site Scripting
Medium
CVE-2022-1990
Nested Pages <= 3.1.20 - Stored Cross-Site Scripting
Medium
CVE-2022-1010
Login using WordPress Users (WP as SAML IDP) <= 1.13.2 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1029
MiniOrange Limit Login Attempts <= 4.0.72 - Administrator+ Cross-Site Scripting
Medium
354c2c6c-5ba1-4bbe-88e4-9d219b66802a
Modula Image Gallery <= 2.6.6 - Reflected Cross-Site Scripting
Critical
CVE-2022-0875
Login With OTP Over SMS, Email, WhatsApp and Google Authenticator <= 1.0.4 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-1988
Cross-site Scripting in FacturaScripts
Medium
CVE-2022-29770
Cross site scripting in XXL-job
High
CVE-2022-2083
Simple Single Sign On <= 4.1.1 - Insecure OAuth Implementation to Authentication Bypass
High
CVE-2022-25863
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx
Medium
CVE-2022-31023
Dev error stack trace leaking into prod in Play Framework
High
CVE-2022-31018
Denial of service binding form from JSON in Play Framework
Medium
CVE-2022-30349
Cross site scripting in SSCMS
Critical
CVE-2022-30506
Code injection in MCMS
High
CVE-2022-30034
Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke
High
CVE-2022-29712
Command injection in librenms
Medium
CVE-2022-29711
Cross site scripting in librenms
Medium
CVE-2022-29648
Cross site scripting in Jfinal
High
CVE-2022-29647
Cross Site Request Forgery in Mingsoft MCMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.