Medium
CVE-2022-45935
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2022-45787
Apache James MIME4J vulnerable to information disclosure to local users
Critical
CVE-2016-15011
dssp vulnerable to Improper Restriction of XML External Entity Reference
Medium
CVE-2021-32828
Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution
Critical
CVE-2020-36640
bonita-connector-webservice XML External Entity vulnerability
Critical
CVE-2020-36641
aXMLRPC XML External Entity vulnerability
Critical
CVE-2022-45875
Apache DolphinScheduler vulnerable to Improper Input Validation
High
CVE-2022-38723
Gravitee API Management contains Path Traversal
High
CVE-2022-45143
Apache Tomcat improperly escapes input from JsonErrorReportValve
Critical
CVE-2021-32824
Apache Dubbo vulnerable to remote code execution via Telnet Handler
High
CVE-2022-47551
Apiman has potential permissions bypass
High
ghsa-q2fj-6h62-59m2
Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue
High
CVE-2022-46178
Path Traversal In MeterSpere leads to upload file to any path
High
CVE-2022-40151
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow
Critical
CVE-2022-44621
Apache Kylin vulnerable to Command injection by Diagnosis Controller
High
CVE-2022-43396
Apache Kylin vulnerable to Command injection by Useless configuration
Critical
CVE-2017-20151
iText RUPS XML External Entity vulnerability
High
CVE-2022-41966
XStream can cause Denial of Service via stack overflow
High
CVE-2022-4772
Widoco Path Traversal vulnerability
Critical
CVE-2022-4725
AWS SDK is vulnerable to server-side request forgery (SSRF)
Critical
CVE-2022-36437
Hazelcast connection caching
Critical
CVE-2022-45347
Apache ShardingSphere-Proxy Incomplete Cleanup vulnerability
Medium
CVE-2022-4640
Mingsoft MCMS Cross-site Scripting vulnerability
Critical
CVE-2022-40145
Apache Karaf vulnerable to potential code injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.