High
CVE-2022-23596
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
High
CVE-2022-23181
Race condition in Apache Tomcat
High
CVE-2021-23460
Prototype pollution in min-dash
Medium
CVE-2022-22932
Path traversal in Apache Karaf
High
CVE-2021-41766
Insecure Java Deserialization in Apache Karaf
High
CVE-2022-23945
Missing authentication in ShenYu
High
CVE-2022-23223
Password exposure in ShenYu
Critical
CVE-2022-23944
Missing authentication in ShenYu
Critical
CVE-2021-45029
Code injection in ShenYu
Medium
CVE-2022-23437
Infinite Loop in Apache Xerces Java
High
CVE-2021-22570
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error me
High
CVE-2021-46383
Mingsoft MCMS SQL injection vulnerability
Critical
CVE-2021-46386
Mingsoft MCMS vulnerable to Remote Code Execution via file upload.
High
CVE-2021-46385
Mingsoft MCMS SQL injection vulnerability
Critical
CVE-2021-46089
SQL Injection in JeecgBoot
Critical
CVE-2022-22929
Arbitrary File Upload in Mingsoft MCMS
Critical
CVE-2022-22930
RCE in Mingsoft MCMS
Critical
CVE-2022-23315
Arbitrary file upload in Mingsoft MCMS
Medium
CVE-2021-42357
Cross-site Scripting in Apache Knox SSO
Critical
CVE-2022-0239
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
High
CVE-2024-23683
Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares
Low
CVE-2022-23106
Observable Discrepancy and Observable Timing Discrepancy in Jenkins Configuration as Code Plugin
High
CVE-2022-23107
Path Traversal in Jenkins Warnings Next Generation Plugin
Medium
CVE-2022-20612
Cross-Site Request Forgery in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.