Medium
CVE-2022-0506
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-0505
Cross-Site Request Forgery in microweber
Medium
CVE-2022-0504
Generation of Error Message Containing Sensitive Information in microweber
Medium
CVE-2022-0509
Cross-site Scripting in pimcore
Critical
CVE-2022-23340
Joplin Vulnerable to Code Injection
Medium
CVE-2022-0510
Cross-site Scripting pimcore
Medium
CVE-2022-0533
Ditty (formerly Ditty News Ticker) <= 3.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2022-0535
E2Pdf <= 1.16.44 - Stored Cross-Site Scripting
High
CVE-2020-13935
Infinite Loop in Apache Tomcat
High
CVE-2020-13934
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
Medium
CVE-2021-41496
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative valu
High
CVE-2021-41495
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks
Medium
CVE-2022-22931
Path Traversal in Apache James Server
High
CVE-2021-4134
Fancy Product Designer <= 4.7.4 - Admin+ SQL Injection
Medium
CVE-2022-2599
Anti-Malware Security and Brute-Force Firewall <= 4.21.74 - Reflected Cross-Site Scripting
High
CVE-2022-23624
Validation bypass in frourio-express
High
CVE-2022-23623
Validation bypass in frourio
High
CVE-2022-21712
Cookie and header exposure in twisted
Medium
CVE-2022-23580
Abort caused by allocating a vector that is too large in Tensorflow
Medium
CVE-2022-23581
`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
Medium
CVE-2022-0502
Cross-site Scripting in LiveHelperChat
High
CVE-2022-0440
Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload
High
abb10680-6208-44c8-8cf0-8d2531465a04
WP-Matomo Integration (WP-Piwik) <= 1.0.26 - Cross-Site Request Forgery
Medium
CVE-2021-25039
Multisite Content Copier/Updater <= 1.4.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.