High
CVE-2022-39368
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Critical
CVE-2022-42920
Apache Commons BCEL vulnerable to out-of-bounds write
High
CVE-2022-37866
Apache Ivy vulnerable to path traversal
Critical
CVE-2022-37865
Apache Ivy does not verify target path when extracting the archive
Critical
CVE-2022-39387
XWiki OIDC Authenticator vulnerable to bypassing OpenID login by providing a custom provider
High
CVE-2022-32287
Apache UIMA Path Traversal vulnerability
Medium
CVE-2019-19040
Reflected Cross site scripting (XSS) in kairosdb
Medium
CVE-2022-43670
Apache Sling App CMS vulnerable to Cross-site Scripting
Medium
CVE-2022-34662
Apache DolphinScheduler vulnerable to Path Traversal
Medium
CVE-2022-31777
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a mal
Critical
CVE-2022-31692
Spring Security authorization rules can be bypassed via forward or include dispatcher types
High
CVE-2022-31690
spring-security-oauth2-client vulnerable to Privilege Escalation
High
CVE-2022-42252
Apache Tomcat may reject request containing invalid Content-Length header
Medium
CVE-2022-26884
Apache DolphinScheduler vulnerable to Path Traversal
High
CVE-2022-43766
Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 wh
Critical
CVE-2022-42468
Apache Flume vulnerable to remote code execution via deserialization of unsafe providerURL
High
CVE-2022-39944
Apache Linkis subject to Remote Code Execution via deserialization
High
CVE-2022-42890
Untrusted code execution in Apache XML Graphics Batik
High
CVE-2022-41704
Apache XML Graphics Batik vulnerable to code execution via SVG.
Medium
CVE-2022-34870
Apache Geode vulnerable to Cross-Site Scripting
Critical
CVE-2021-42010
Heron allows CRLF log injection
Medium
CVE-2022-40084
OpenCRX vulnerable to password enumeration via error messages in password reset
Medium
CVE-2022-39259
Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack
Medium
CVE-2022-31684
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.