High
CVE-2022-41226
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filters
Medium
CVE-2022-41241
Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference
High
CVE-2022-1278
WildFly vulnerable to Insecure Default Initialization of Resource
Critical
CVE-2022-39135
Apache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack
High
CVE-2022-26049
Goomph before 3.37.2 allows malicious zip file to write contents to arbitrary locations
Medium
CVE-2022-31189
JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization
High
CVE-2022-31781
Apache Tapestry 5.8.1 vulnerable to ReDoS via Content Types causing catastrophic backtracking
High
CVE-2022-27772
Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot
Low
CVE-2022-33879
Apache Tika contains incomplete fix for regex DoS
High
CVE-2022-34192
Cross-site Scripting in Jenkins ontrack Jenkins Plugin
Medium
CVE-2022-32549
Log Injection in Apache Sling Commons Log and Apache Sling API
Medium
CVE-2022-31023
Dev error stack trace leaking into prod in Play Framework
Medium
CVE-2022-30973
Regular expression denial of service in apache tika
High
CVE-2022-29249
Reversible One-Way Hash in io.github.javaezlib:JavaEZ
Medium
CVE-2022-29237
Limited Authentication Bypass for Media Files
High
CVE-2019-10327
XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
Medium
CVE-2021-43576
XXE vulnerability in Jenkins pom2config Plugin
Medium
CVE-2021-21701
XXE vulnerability in Jenkins Performance Plugin
High
CVE-2021-43577
XXE vulnerability in Jenkins OWASP Dependency-Check Plugin
High
CVE-2021-21680
XXE vulnerability in Jenkins Nested View Plugin
Critical
CVE-2021-21669
XXE vulnerability in Jenkins Generic Webhook Trigger Plugin
Critical
CVE-2021-21658
XML external entity vulnerability in Jenkins Nuget Plugin
High
CVE-2021-21657
XXE vulnerability in Jenkins Filesystem Trigger Plugin
High
CVE-2021-21659
XXE vulnerability in Jenkins URLTrigger Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.