Critical
CVE-2022-38638
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
Critical
CVE-2022-3167
rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames
Medium
CVE-2022-36082
mangadex-downloader vulnerable to unauthorized file reading
High
CVE-2022-36070
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
High
CVE-2022-36069
Poetry Argument Injection can lead to Local Code Execution
High
CVE-2022-40023
mako is vulnerable to Regular Expression Denial of Service
High
CVE-2022-31020
Indy's NODE_UPGRADE transaction vulnerable to remote code execution
High
CVE-2022-38369
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
High
CVE-2022-30331
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++
High
CVE-2022-31152
Denial of service due to incorrect application of event authorization rules
Medium
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Critical
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
Critical
CVE-2022-39227
python-jwt vulnerable to token forgery with new claims
Critical
CVE-2022-2996
python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Medium
CVE-2022-0718
python-oslo-utils has improper password parsing
Critical
CVE-2022-34668
NVFLARE unsafe deserialization due to Pickle
Critical
CVE-2022-38792
exotel-py includes code execution backdoor inserted by a third party
Critical
CVE-2021-3563
Openstack Keystone Incorrect Authorization vulnerability
Unrated
pysec-2022-252
The deep-translator project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and download
Unrated
pysec-2022-251
The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran
Unrated
pysec-2022-250
The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ra
Medium
CVE-2021-3427
Deluge Web-UI vulnerable to XSS through a crafted torrent file
High
CVE-2022-2255
Incorrect header handling in mod-wsgi
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.