Medium
CVE-2021-3914
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2021-4040
org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write
Medium
CVE-2019-25075
Path Traversal in Gravitee API Management
Medium
CVE-2022-35278
HTML Injection in ActiveMQ Artemis Web Console
Medium
CVE-2020-35509
Keycloak vulnerable to Improper Certificate Validation
Critical
CVE-2022-37223
SQL injection in jflyfox jfinal
Critical
CVE-2022-37199
SQL injection in jflyfox jfinal
Low
CVE-2022-38665
RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin
Medium
CVE-2022-38664
Cross-site Scripting in Jenkins Job Configuration History Plugin
Medium
CVE-2022-38663
Improper masking of credentials Jenkins in Git Plugin
High
CVE-2021-3513
Incorrect implementation of lockout feature in Keycloak
Critical
CVE-2022-34916
Remote code execution in Apache Flume
High
CVE-2022-36157
Improper Privilege Management in com.xuxueli:xxl-job
High
CVE-2022-37422
Path Traversal in Payara
Medium
CVE-2022-36007
Venice vulnerable to Partial Path Traversal issue within the functions `load-file` and `load-resource`
High
CVE-2022-38216
Mapbox is vulnerable to Integer Overflow
Critical
CVE-2022-36599
Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List
Critical
CVE-2022-36272
Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter
High
CVE-2020-23622
4thline cling uPnP protocol issue can lead to denial of service
Medium
CVE-2022-38180
JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider
Medium
CVE-2022-38179
JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack
Medium
CVE-2022-2390
Google Play Services SDK leads to apps having incorrectly set mutability flag
High
CVE-2022-35980
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
Medium
CVE-2022-37423
Neo4j Graph apoc plugins Partial Path Traversal Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.