High
CVE-2022-35939
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-35937
TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite
Medium
CVE-2022-36101
Shopware contains sensitive data in backend customer module
Medium
CVE-2022-36102
Shopware access control list bypassed via crafted specific URLs
Medium
CVE-2022-35934
TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows
Medium
CVE-2022-35935
TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation
High
CVE-2022-31006
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client co
Medium
CVE-2022-35997
TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross`
Medium
CVE-2022-35999
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
Medium
CVE-2022-36020
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
Medium
CVE-2022-36032
ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent
High
CVE-2022-36076
NodeBB account takeover via SSO plugins
Medium
CVE-2022-36083
JOSE vulnerable to resource exhaustion via specifically crafted JWE
Critical
CVE-2022-36084
cruddl vulnerable to ArangoDB Query Language (AQL) injection through flexSearch
High
CVE-2022-36090
XWiki Platform Improper Authorization check for inactive users
High
CVE-2022-36091
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
High
CVE-2022-36096
XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list
High
CVE-2022-36097
XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form
Critical
CVE-2022-36098
XWiki Platform Mentions UI vulnerable to Cross-site Scripting
Critical
CVE-2022-36099
XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability
Critical
CVE-2022-36100
XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection
Medium
CVE-2022-36104
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Medium
CVE-2022-36105
TYPO3 CMS vulnerable to User Enumeration via Response Timing
Medium
CVE-2022-36106
TYPO3 CMS missing check for expiration time of password reset token for backend users
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.