Medium
CVE-2022-2712
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 546
Reset filters
Medium
CVE-2022-25901
cookiejar Regular Expression Denial of Service via Cookie.parse function
Critical
CVE-2023-22457
XWiki CKEditor.HTMLConverter vulnerable to Remote Code Execution via Cross-Site Request Forgery
Critical
CVE-2022-40145
Apache Karaf vulnerable to potential code injection
High
CVE-2022-1471
SnakeYaml Constructor Deserialization Remote Code Execution
High
CVE-2022-45868
Password exposure in H2 Database
Medium
CVE-2022-41935
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
Medium
CVE-2022-41933
Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default
Critical
CVE-2022-41928
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
High
CVE-2022-45379
Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
Critical
CVE-2022-37865
Apache Ivy does not verify target path when extracting the archive
High
CVE-2022-32287
Apache UIMA Path Traversal vulnerability
Medium
CVE-2022-39259
Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack
High
CVE-2022-43407
CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin
High
CVE-2022-43408
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
Critical
CVE-2022-39312
MySQL JDBC deserialization vulnerability
Critical
CVE-2022-42889
Arbitrary code execution in Apache Commons Text
High
CVE-2022-39248
matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
High
CVE-2022-39243
NuProcess vulnerable to command-line injection through insertion of NUL character(s)
Medium
CVE-2022-33681
Apache Pulsar Java Client vulnerable to Improper Certificate Validation
High
CVE-2022-31166
XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups
High
CVE-2022-36091
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
High
CVE-2022-26049
Goomph before 3.37.2 allows malicious zip file to write contents to arbitrary locations
High
CVE-2022-28220
Apache James vulnerable to buffering attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.