High
CVE-2022-22936
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,829
Reset filters
Low
CVE-2022-22935
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonat
High
CVE-2022-24303
Path traversal in Pillow
High
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
High
CVE-2022-25568
MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
High
CVE-2022-0315
Use of insecure temporary file in Horovod
Critical
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
Critical
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
High
CVE-2022-24770
`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil
High
CVE-2022-24302
Race Condition in Paramiko
High
CVE-2022-24761
HTTP Request Smuggling in waitress
Medium
CVE-2021-23556
Command injection in guake
Medium
CVE-2022-0430
Exposure of Sensitive information in httpie
High
CVE-2022-21187
Command injection in libvcs and vcspull
Critical
ghsa-32gv-6cf3-wcmq
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
Low
ghsa-4fx9-vc88-q2xc
Infinite loop in Pillow
Medium
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
High
CVE-2022-25508
Improper Authentication in FreeTAKServer
High
CVE-2022-25510
Hard coded credentials in FreeTAKServer
High
CVE-2022-26662
XML Entity Expansion in trytond and proteus
Medium
CVE-2022-26661
Improper Restriction of XML External Entity Reference in trytond and proteus
High
CVE-2021-38296
Authentication Bypass by Capture-replay in Apache Spark
Critical
CVE-2022-0766
Server-Side Request Forgery in calibreweb
Critical
CVE-2022-0767
Server-Side Request Forgery in calibreweb
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.