Medium
CVE-2022-35697
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2022-31197
PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names
High
CVE-2022-31195
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
High
CVE-2022-31194
JSPUI vulnerable to path traversal in submission (resumable) upload
High
CVE-2022-31193
JSPUI's controlled vocabulary feature vulnerable to Open Redirect before v6.4 and v5.11
High
CVE-2022-31192
JSPUI Possible Cross Site Scripting in "Request a Copy" Feature
High
CVE-2022-31191
JSPUI spellcheck and autocomplete tools vulnerable to Cross Site Scripting
Medium
CVE-2022-31190
XMLUI's metadata of withdrawn Items is exposed to anonymous users
Medium
CVE-2022-31189
JSPUI's "Internal System Error" page prints exceptions and stack traces without sanitization
High
CVE-2022-2053
Undertow vulnerable to Dos via Large AJP request
High
CVE-2022-34158
Apache JSPWiki CSRF due to crafted invocation on the Image plugin
Medium
CVE-2022-27166
Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp
Medium
CVE-2022-28732
Apache JSPWiki XSS due to crafted request in WeblogPlugin
Medium
CVE-2022-28731
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
Medium
CVE-2022-28730
Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369
Critical
CVE-2022-25168
Apache Hadoop argument injection vulnerability
High
CVE-2022-25867
Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference
High
CVE-2022-2576
Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch
Critical
CVE-2022-31183
fs2-io skips mTLS client verification
High
CVE-2022-36364
Apache Calcite Avatica JDBC driver arbitrary code execution
Low
CVE-2022-36885
Jenkins GitHub plugin uses weak webhook signature function
Medium
CVE-2022-36887
Jenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints
Medium
CVE-2022-36883
Lack of authentication mechanism in Jenkins Git Plugin webhook
Medium
CVE-2022-36882
Lack of authentication mechanism in Jenkins Git Plugin webhook
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.