Critical
CVE-2022-24637
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
CVE-2022-27200
Stored Cross-site Scripting in folder-auth plugin
Medium
ghsa-3fvf-2gp4-89wq
Possibility for Denial of Service by overwriting PHP files with language exports
High
CVE-2022-24770
`gradio` is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, `gradio` suffers from Improper Neutralization of Formula Elements in a CSV Fil
Medium
CVE-2022-24773
Improper Verification of Cryptographic Signature in `node-forge`
High
CVE-2022-24772
Improper Verification of Cryptographic Signature in node-forge
High
CVE-2022-24771
Improper Verification of Cryptographic Signature in node-forge
High
CVE-2022-51013
Improperly checked metadata on tools/armour itemstacks received from the client
High
CVE-2022-24759
Failure to validate signature during handshake
High
CVE-2020-14326
RESTEasy 4.5.5.Final in hash flooding
High
CVE-2020-35510
Uncontrolled Resource Consumption in jboss-remoting
Critical
CVE-2021-30180
Code injection in Apache Dubbo
Critical
CVE-2021-30179
Deserialization of Untrusted Data in Apache Dubbo
Critical
CVE-2021-30181
Code injection in Apache Dubbo
Medium
CVE-2021-25640
Server-Side Request Forgery in Apache Dubbo
Critical
CVE-2021-25641
Deserializer tampering in Apache Dubbo
Medium
CVE-2020-1729
Permissions bypass in SmallRye
High
CVE-2020-27826
Authentication Bypass in keycloak
Medium
CVE-2021-32645
Open Redirect
High
CVE-2021-48007
NaN/INF in serverbound movement packets can crash clients and servers
High
CVE-2021-30638
Information Exposure in Apache Tapestry
Medium
CVE-2021-32470
Craft CMS Cross-site Scripting Vulnerability
High
CVE-2021-21655
Cross-Site Request Forgery in Jenkins P4 Plugin
High
CVE-2021-21656
XML external entity (XXE) attacks in Jenkins Xcode integration Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.