Medium
CVE-2022-36095
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2022-36090
XWiki Platform Improper Authorization check for inactive users
High
CVE-2022-36091
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
High
CVE-2022-36096
XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list
High
CVE-2022-36097
XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form
Critical
CVE-2022-36098
XWiki Platform Mentions UI vulnerable to Cross-site Scripting
Critical
CVE-2022-36099
XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability
Critical
CVE-2022-36100
XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection
High
CVE-2022-36092
XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action
High
CVE-2022-36093
XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard
High
CVE-2022-36094
XWiki Platform Web Parent POM vulnerable to XSS in the attachment history
High
CVE-2022-25897
Eclipse Milo vulnerable to Resource Exhaustion (Denial of Service)
Medium
CVE-2022-37724
Project Wonder WebObjects vulnerable to Arbitrary HTTP Header Injection and Cross-site Scripting
High
CVE-2022-1278
WildFly vulnerable to Insecure Default Initialization of Resource
High
CVE-2022-26049
Goomph before 3.37.2 allows malicious zip file to write contents to arbitrary locations
High
CVE-2022-38370
Apache IoTDB grafana-connector contains an interface without authorization
High
CVE-2022-37435
Apache ShenYu Admin has insecure permissions
Medium
CVE-2022-36033
jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled
Medium
CVE-2022-37023
Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data
High
CVE-2022-37022
Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11
Critical
CVE-2022-37021
Apache Geode vulnerable to Deserialization of Untrusted Data
Critical
CVE-2022-2466
Quarkus does not terminate HTTP requests header context
Low
CVE-2021-3644
wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault
Medium
CVE-2021-3856
Keycloak has Files or Directories Accessible to External Parties
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.