Medium
CVE-2022-4348
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2022-43484
TERASOLUNA Server Framework vulnerable to ClassLoader manipulation
Critical
CVE-2022-46366
Apache Tapestry allows deserialization of untrusted data
Medium
CVE-2022-41965
Authenticated OpenRedirect Vulnerability
Critical
CVE-2022-45206
Jeecg-boot vulnerable to SQL Injection
Medium
CVE-2022-45210
Jeecg-boot vulnerable to SQL Injection
Critical
CVE-2022-45207
Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString
Medium
CVE-2022-45208
Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin
Medium
CVE-2022-41946
TemporaryFolder on unix-like systems does not limit access to created files
High
CVE-2022-45868
Password exposure in H2 Database
Critical
CVE-2022-41937
Missing Authorization in Filter Stream Converter Application of XWiki-platform
Medium
CVE-2022-41936
Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-server
Medium
CVE-2022-41935
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
Critical
CVE-2022-41934
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-menu-ui
Medium
CVE-2022-41933
Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default
High
CVE-2022-41932
Creation of new database tables through login form on PostgreSQL
Critical
CVE-2022-41931
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui
Critical
CVE-2022-41930
Missing Authorization to enable or disable users in org.xwiki.platform:xwiki-platform-user-profile-ui
Medium
CVE-2022-41929
Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore
Critical
CVE-2022-41928
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
High
CVE-2022-41927
Cross-Site Request Forgery (CSRF) allowing to delete or rename tags
High
CVE-2022-4065
TestNG is vulnerable to Path Traversal
High
CVE-2022-43183
XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)
High
CVE-2022-45387
Jenkins BART Plugin vulnerable to cross-site scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.