Critical
CVE-2020-36641
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2022-38723
Gravitee API Management contains Path Traversal
Critical
CVE-2021-32824
Apache Dubbo vulnerable to remote code execution via Telnet Handler
High
CVE-2022-47551
Apiman has potential permissions bypass
High
ghsa-q2fj-6h62-59m2
Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue
High
CVE-2022-46178
Path Traversal In MeterSpere leads to upload file to any path
High
CVE-2022-40151
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow
Critical
CVE-2017-20151
iText RUPS XML External Entity vulnerability
High
CVE-2022-41966
XStream can cause Denial of Service via stack overflow
High
CVE-2022-4772
Widoco Path Traversal vulnerability
Critical
CVE-2022-4725
AWS SDK is vulnerable to server-side request forgery (SSRF)
Critical
CVE-2022-45347
Apache ShardingSphere-Proxy Incomplete Cleanup vulnerability
Critical
CVE-2022-40145
Apache Karaf vulnerable to potential code injection
Medium
CVE-2022-4520
WSO2 carbon-registry Cross-site Scripting vulnerability
Medium
CVE-2022-32531
Apache Bookkeeper vulnerable to Improper Certificate Validation
Critical
CVE-2022-3782
Keycloak vulnerable to path traversal via double URL encoding
High
CVE-2022-45693
Jettison Out-of-bounds Write vulnerability
Low
CVE-2022-45689
hutool-json vulnerable to memory exhaustion
Medium
CVE-2022-41915
Netty vulnerable to HTTP Response splitting from assigning header value iterator
Medium
CVE-2022-41881
HAProxyMessageDecoder Stack Exhaustion DoS
High
CVE-2022-1471
SnakeYaml Constructor Deserialization Remote Code Execution
High
CVE-2022-3509
Protobuf Java vulnerable to Uncontrolled Resource Consumption
High
CVE-2022-3510
Protobuf Java vulnerable to Uncontrolled Resource Consumption
Medium
CVE-2022-46688
Jenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.