Medium
CVE-2022-45208
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2022-26885
Apache Dolphin Scheduler has insufficiently protected credentials
Medium
CVE-2022-41946
TemporaryFolder on unix-like systems does not limit access to created files
High
CVE-2022-45868
Password exposure in H2 Database
Critical
CVE-2022-45462
Command injection in Apache DolphinScheduler Alert Plugins
Critical
CVE-2022-4116
Code injection in quarkus dev ui config editor
Critical
CVE-2022-41937
Missing Authorization in Filter Stream Converter Application of XWiki-platform
Medium
CVE-2022-41936
Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-server
Medium
CVE-2022-41935
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
Critical
CVE-2022-41934
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-menu-ui
Medium
CVE-2022-41933
Plaintext storage of password after a reset in org.xwiki.platform:xwiki-platform-security-authentication-default
High
CVE-2022-41932
Creation of new database tables through login form on PostgreSQL
Critical
CVE-2022-41931
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui
Critical
CVE-2022-41930
Missing Authorization to enable or disable users in org.xwiki.platform:xwiki-platform-user-profile-ui
Medium
CVE-2022-41929
Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore
Critical
CVE-2022-41928
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
High
CVE-2022-41927
Cross-Site Request Forgery (CSRF) allowing to delete or rename tags
High
CVE-2022-45470
Cross-site Scripting in Apache Hama
Medium
CVE-2022-45146
Garbage collection issue in BC-FJA in Java 13 and later
High
CVE-2022-4065
TestNG is vulnerable to Path Traversal
High
CVE-2022-43183
XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)
Medium
CVE-2022-45398
Cross-Site Request Forgery in Jenkins Cluster Statistics Plugin
High
CVE-2022-45400
XXE vulnerability in Jenkins JAPEX Plugin
Medium
CVE-2022-45390
Missing permission check in Jenkins loader.io Plugin allows enumerating credentials IDs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.