Medium
CVE-2022-25873
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2022-40149
Jettison parser crash by stackoverflow
Medium
CVE-2022-40152
Denial of Service due to parser crash
High
CVE-2022-40150
Jettison memory exhaustion
Medium
CVE-2022-36095
XWiki Cross-Site Request Forgery (CSRF) for actions on tags
High
CVE-2022-36090
XWiki Platform Improper Authorization check for inactive users
High
CVE-2022-36091
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
High
CVE-2022-36096
XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list
High
CVE-2022-36097
XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form
Critical
CVE-2022-36098
XWiki Platform Mentions UI vulnerable to Cross-site Scripting
Critical
CVE-2022-36099
XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability
Critical
CVE-2022-36100
XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection
High
CVE-2022-36092
XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action
High
CVE-2022-36093
XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard
High
CVE-2022-36094
XWiki Platform Web Parent POM vulnerable to XSS in the attachment history
High
CVE-2022-25897
Eclipse Milo vulnerable to Resource Exhaustion (Denial of Service)
Medium
CVE-2022-37724
Project Wonder WebObjects vulnerable to Arbitrary HTTP Header Injection and Cross-site Scripting
High
CVE-2022-1278
WildFly vulnerable to Insecure Default Initialization of Resource
High
CVE-2022-40634
CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources
High
CVE-2022-40635
CrafterCMS OS Command Injection vulnerability
High
CVE-2022-37734
graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources
Critical
CVE-2022-37767
Pebble Templates protection mechanism bypass can lead to arbitrary code execution
Critical
CVE-2022-39135
Apache Calcite before 1.32.0 vulnerable to potential XML External Entity (XXE) attack
High
CVE-2022-26049
Goomph before 3.37.2 allows malicious zip file to write contents to arbitrary locations
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.