High
CVE-2022-1686
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
Medium
CVE-2022-1568
Team Members <= 5.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-0642
JivoChat Live Chat – WP live chat plugin for WordPress <= 1.3.5.3 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-2072
Name Directory <= 1.25.2 - Cross-Site Scripting
Critical
CVE-2021-23792
External Entity Reference in TwelveMonkeys ImageIO
Critical
CVE-2021-23592
Deserialization of Untrusted Data in topthink/framework
High
CVE-2022-25324
Uncaught Exception in bignum
Medium
CVE-2022-1113
Flower Delivery by Florist One <= 3.5.8 - (Admin+) Stored Cross-Site Scripting
Critical
CVE-2022-1053
Tenant and Verifier might not use the same registrar data
Medium
CVE-2022-29432
wpDataTables <= 2.1.27 - Authenticated Cross-Site Scripting
High
CVE-2022-29431
Remove CPT base <= 5.8 - Cross-Site Request Forgery to CPT base deletion
High
CVE-2022-29430
PNG to JPG <= 5.8 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Critical
CVE-2022-30284
** DISPUTED ** In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments). NOTE: the vendor believes
Critical
CVE-2022-28890
XML External Entity Reference in apache jena
Medium
CVE-2022-1411
Unrestricted Upload of File with Dangerous Type in yetiforce-crm
Medium
CVE-2022-1527
WP 2FA – Two-factor authentication for WordPress <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4905
WP-Stateless – Google Cloud Storage <= 3.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
ghsa-52rh-5rpj-c3w6
Improper handling of multiline messages in node-irc
Medium
CVE-2013-0331
Jenkins Vulnerable to Denial of Service (DoS) via Crafted Payload
Medium
CVE-2013-0330
Jenkins allows Remote Users to Build Arbitrary Jobs
Medium
CVE-2013-0328
Jenkins subject to Cross-site Scripting
Medium
CVE-2013-0327
Jenkins Cross-Site Request Forgery vulnerability
Medium
CVE-2013-0329
Jenkins Cross-Site Request Forgery vulnerability
Medium
CVE-2013-0305
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated ad
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.