Medium
CVE-2022-31160
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
Exploited in attacks
CVE-2022-33891
Apache Spark UI can allow impersonation if ACLs enabled
High
CVE-2021-34538
Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
High
CVE-2021-3859
Undertow vulnerable to Denial of Service (DoS) attacks
High
CVE-2021-3690
Undertow vulnerable to memory exhaustion due to buffer leak
High
CVE-2020-28191
Togglz console missing cross-site request forgery (CSRF) protection
High
CVE-2022-31159
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
High
CVE-2020-10650
jackson-databind vulnerable to unsafe deserialization
Critical
CVE-2015-8031
Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2
Medium
CVE-2021-4178
fabric8 kubernetes-client vulnerable
High
CVE-2022-31781
Apache Tapestry 5.8.1 vulnerable to ReDoS via Content Types causing catastrophic backtracking
Medium
CVE-2022-32065
RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module
Medium
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Medium
CVE-2022-31139
UnsafeAccessor 1.4.0 until 1.7.0 has no security checking for UnsafeAccess.getInstance()
High
CVE-2022-27772
Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot
Medium
CVE-2015-5298
Jenkins Google Login Plugin 1.0 and 1.1 allows anonymous users to authenticate through client-side request modification
Medium
CVE-2022-28889
Apache Druid before 0.23.0 vulnerable to clickjacking
Medium
CVE-2021-44791
Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters
Medium
CVE-2021-41042
XML External Entity Reference in Eclipse Lyo
High
CVE-2022-2048
Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service
High
CVE-2022-2191
Jetty SslConnection does not release pooled ByteBuffers in case of errors
Low
CVE-2022-2047
Jetty invalid URI parsing may produce invalid HttpURI.authority
Critical
CVE-2022-32533
Insufficient user input in Apache Jetspeed-2
Critical
CVE-2022-33980
Code injection in Apache Commons Configuration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.