High
CVE-2022-41404
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Critical
CVE-2022-40664
Apache Shiro Authentication Bypass vulnerability
Medium
CVE-2022-41414
Liferay Portal Insecure Default Configuration in auth.login.prompt.enabled
Critical
CVE-2022-41853
HyperSQL DataBase vulnerable to remote code execution when processing untrusted input
Medium
CVE-2022-3171
protobuf-java has a potential Denial of Service issue
High
CVE-2022-42003
Uncontrolled Resource Consumption in Jackson-databind
High
CVE-2022-42004
Uncontrolled Resource Consumption in FasterXML jackson-databind
High
ghsa-f36p-42jv-8rh2
Lithium vulnerable to Cross Site Scripting in provided Swagger-UI
High
CVE-2022-39248
matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
High
CVE-2022-39246
matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions
High
CVE-2022-39243
NuProcess vulnerable to command-line injection through insertion of NUL character(s)
Low
CVE-2021-43980
Apache Tomcat Race Condition vulnerability
Critical
CVE-2022-40929
XXL-JOB contains a Command execution vulnerability in background tasks
Medium
CVE-2022-33683
Apache Pulsar Brokers and Proxies vulnerable to Improper Certificate Validation
Medium
CVE-2022-33682
Apache Pulsar Broker, Proxy, and WebSocket Proxy vulnerable to Improper Certificate Validation
Medium
CVE-2022-33681
Apache Pulsar Java Client vulnerable to Improper Certificate Validation
Critical
CVE-2022-26112
Apache Pinot has Groovy Function support enabled by default
Critical
CVE-2022-36944
Scala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization
Medium
CVE-2022-24280
Proxy component of Apache Pulsar subject to abuse as Denial of Service endpoint
Critical
CVE-2022-23463
Nepxion Discovery vulnerable to SpEL Injection leading to Remote Code Execution
Medium
CVE-2022-23464
Nepxion Discovery vulnerable to potential Information Disclosure due to Server-Side Request Forgery
Critical
CVE-2022-36025
Besu VM vulnerable to gas allocation error in CALL operations
High
CVE-2022-2668
Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console
Medium
CVE-2022-28979
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.