Medium
CVE-2021-32478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-0921
Unrestricted Upload of File with Dangerous Type in Microweber
Medium
CVE-2021-44667
Cross-site Scripting in Nacos
Medium
CVE-2022-25839
Improper Input Validation in url-js
Critical
CVE-2022-24760
Command injection in Parse Server through prototype pollution
Low
ghsa-4fx9-vc88-q2xc
Infinite loop in Pillow
Medium
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
High
CVE-2022-25508
Improper Authentication in FreeTAKServer
High
CVE-2022-25510
Hard coded credentials in FreeTAKServer
Medium
CVE-2022-0906
Unrestricted file upload leads to stored cross-site scripting in Microweber
High
CVE-2022-0895
Static Code Injection in Microweber
High
CVE-2022-0813
Exposure of Sensitive Information to an Unauthorized Actor in PhpMyAdmin
High
CVE-2022-26662
XML Entity Expansion in trytond and proteus
Medium
CVE-2022-26661
Improper Restriction of XML External Entity Reference in trytond and proteus
Medium
CVE-2022-26520
pgjdbc Arbitrary File Write Vulnerability
High
CVE-2021-44673
Unrestricted Upload of File with Dangerous Type in Croogo
Medium
CVE-2021-44585
Cross-site Scripting in jeecg-boot
Medium
CVE-2022-0404
Material Design for Contact Form 7 <= 2.6.4 - Missing Authorization to Arbitrary Settings Update
Medium
954b8064-f317-4af4-a55f-9a61ee945006
WordPress Core < 5.9.2 & Gutenberg < 12.7.2 - Prototype Pollution via Block Editor
Medium
0ddb582a-e966-4c0b-a743-29d8943f846b
WordPress Core 5.9 - 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-20083
WordPress Core < 5.9.1 - jQuery Prototype Pollution
Medium
CVE-2022-24748
Incorrect Authentication in shopware
Medium
CVE-2022-24747
HTTP caching is marking private HTTP headers as public in Shopware
Medium
CVE-2022-24746
HTML injection possibility in voucher code form in Shopware
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.