Critical
CVE-2022-37021
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 546
Reset filters
Critical
CVE-2022-34916
Remote code execution in Apache Flume
Medium
CVE-2022-37423
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
High
CVE-2022-31195
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
High
CVE-2022-31194
JSPUI vulnerable to path traversal in submission (resumable) upload
High
CVE-2022-31193
JSPUI's controlled vocabulary feature vulnerable to Open Redirect before v6.4 and v5.11
High
CVE-2022-31192
JSPUI Possible Cross Site Scripting in "Request a Copy" Feature
High
CVE-2022-31191
JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting
Medium
CVE-2022-31190
XMLUI's metadata of withdrawn Items is exposed to anonymous users
Medium
CVE-2022-31189
JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization
Critical
CVE-2022-25168
Apache Hadoop argument injection vulnerability
Medium
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
High
CVE-2022-31159
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
High
CVE-2022-2191
Jetty SslConnection does not release pooled ByteBuffers in case of errors
Critical
CVE-2022-33980
Code injection in Apache Commons Configuration
High
CVE-2022-25167
Remote Code Execution in Apache Flume
Critical
CVE-2019-17560
Improper Certificate Validation in Apache Netbeans
Medium
CVE-2021-33330
Exposure of Resource to Wrong Sphere in Liferay Portal
High
CVE-2019-17598
Play Framework Inadequate Encryption Strength vulnerability
Critical
CVE-2021-21686
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21685
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21689
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21690
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21692
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.