Medium
CVE-2022-46685
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2022-46687
Cross-site Scripting in Jenkins Spring Config Plugin
High
CVE-2022-46686
Jenkins Custom Build Properties Plugin vulnerable to Cross-site Scripting
High
CVE-2022-46684
Stored XSS vulnerability in Jenkins Checkmarx Plugin
Medium
CVE-2022-46683
Jenkins Google Login Plugin Open Redirect vulnerability
High
CVE-2022-46682
Jenkins Plot Plugin XML External Entity Reference vulnerability
High
CVE-2022-46166
Spring Boot Admins integrated notifier support allows arbitrary code execution
Critical
CVE-2022-4375
Mingsoft MCMS vulnerable to SQL Injection
High
CVE-2022-23496
Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List
Medium
CVE-2022-4350
Mingsoft MCMS vulnerable to Cross-site Scripting
Medium
CVE-2022-4348
RuoYi-Cloud Cross-site Scripting vulnerability
High
CVE-2022-4147
Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed
Critical
CVE-2022-45046
camel-ldap component allows LDAP Injection when using the filter option
High
CVE-2022-43484
TERASOLUNA Server Framework vulnerable to ClassLoader manipulation
Medium
CVE-2021-37533
Apache Commons Net vulnerable to information leakage via malicious server
Critical
CVE-2022-46366
Apache Tapestry allows deserialization of untrusted data
Critical
CVE-2022-44262
ff4j is vulnerable to Remote Code Execution (RCE)
Medium
CVE-2022-41965
Authenticated OpenRedirect Vulnerability
High
CVE-2022-21126
HTSJDK is vulnerable to exposure of resource(s) to the wrong sphere
High
CVE-2022-45921
FusionAuth vulnerable to directory traversal attack
Low
CVE-2022-41954
Temporary File Information Disclosure vulnerability in MPXJ
Critical
CVE-2022-45206
Jeecg-boot vulnerable to SQL Injection
Medium
CVE-2022-45210
Jeecg-boot vulnerable to SQL Injection
Critical
CVE-2022-45207
Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.