High
CVE-2022-0084
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2022-0225
Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown
High
CVE-2021-25642
Deserialization of Untrusted Data in Apache Hadoop YARN
Medium
CVE-2021-4040
org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
Medium
CVE-2019-25075
Path Traversal in Gravitee API Management
Low
CVE-2022-38665
RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin
Medium
CVE-2022-36007
Venice vulnerable to Partial Path Traversal issue within the functions `load-file` and `load-resource`
Critical
CVE-2022-36599
Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List
Critical
CVE-2022-36272
Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter
High
CVE-2020-23622
4thline cling uPnP protocol issue can lead to denial of service
Medium
CVE-2022-38180
JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider
Medium
CVE-2022-38179
JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack
Medium
CVE-2022-2390
Google Play Services SDK leads to apps having incorrectly set mutability flag
High
CVE-2022-35980
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
Medium
CVE-2022-37423
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
Medium
CVE-2022-35697
AEM WCM Core Components CVG Image vulnerable to Reflected Cross-site Scripting
High
CVE-2022-31197
PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names
High
CVE-2022-31195
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
High
CVE-2022-31194
JSPUI vulnerable to path traversal in submission (resumable) upload
High
CVE-2022-31193
JSPUI's controlled vocabulary feature vulnerable to Open Redirect before v6.4 and v5.11
High
CVE-2022-31192
JSPUI Possible Cross Site Scripting in "Request a Copy" Feature
High
CVE-2022-31191
JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting
Medium
CVE-2022-31190
XMLUI's metadata of withdrawn Items is exposed to anonymous users
Medium
CVE-2022-31189
JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.