High
CVE-2022-1929
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Low
CVE-2021-43308
Regular expression denial of service in markdown-link-extractor
Low
CVE-2021-43306
Regular expression denial of service in jquery-validation
High
CVE-2021-34084
OS Command Injection in s3-uploader
High
CVE-2021-34083
Command injection in google-it
High
CVE-2021-34082
OS Command Injection in proctree
Critical
CVE-2020-28246
Server-Side Template Injection in formio
High
CVE-2021-34081
OS Command Injection in gitsome
High
CVE-2021-34080
OS Command injection in ssl-utils
High
CVE-2021-34079
Command injection in docker-tester
High
CVE-2021-34078
OS Command Injection in lifion-verify-deps
Medium
CVE-2022-30429
Neos CMS vulnerable to XSS in various backend modules
Medium
f5867f37-ae58-4f75-828e-bb99b3e5252e
Currency Switcher for WordPress <= 1.0.3 - Reflected Cross-Site Scripting
Low
CVE-2022-1327
Image Gallery – Grid Gallery <= 1.1.1 - Stored Cross-Site Scripting
Medium
CVE-2022-1904
Easy Pricing Tables <= 3.2.0 - Reflected Cross-Site Scripting
Unrated
743
JUX Timetable - SQL Injection
Critical
ghsa-2x4v-g8cx-jxrq
Login timing attack in ibexa/core
Critical
ghsa-xfqg-p48g-hh94
Login timing attack in ezsystems/ezpublish-kernel
Critical
ghsa-342c-vcff-2ff2
Login timing attack in ezsystems/ezplatform-kernel
Critical
ghsa-67r3-h899-9w95
Embedded Malicious Code in ctx
High
CVE-2022-29244
Packing does not respect root-level ignore files in workspaces
High
ghsa-c8f7-x2g7-7fxj
Phoenix-ws source code and data in extensions folder is publicly available
Critical
CVE-2022-31799
Denial of service in bottle
Medium
ff6e6101-8ba5-4cc7-9b02-67a0d9a978b6
Browser and Operating System Finder <= 1.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.