High
CVE-2022-43484
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Medium
CVE-2021-37533
Apache Commons Net vulnerable to information leakage via malicious server
Medium
CVE-2022-41936
Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-server
Medium
CVE-2022-41935
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
Critical
CVE-2022-41934
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-menu-ui
Critical
CVE-2022-41931
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui
High
CVE-2022-43183
XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)
High
CVE-2022-45400
XXE vulnerability in Jenkins JAPEX Plugin
Medium
CVE-2022-45396
XXE vulnerability on agents in Jenkins SourceMonitor Plugin
Medium
CVE-2022-45397
XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin
Medium
CVE-2022-45386
XML External Entity Reference in Jenkins Violations Plugin
Critical
CVE-2022-45047
Unsafe deserialization in Apache MINA SSHD
High
CVE-2022-42124
Inefficient Regular Expression Complexity in Liferay Portal
Critical
CVE-2022-45136
Apache Jena vulnerable to Deserialization of Untrusted Data
High
CVE-2022-39368
Failing DTLS handshakes may cause throttling to block processing of records
High
CVE-2022-31690
spring-security-oauth2-client vulnerable to Privilege Escalation
Medium
CVE-2022-26884
Apache DolphinScheduler vulnerable to Path Traversal
High
CVE-2022-43766
Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 wh
Medium
CVE-2022-31684
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
High
CVE-2022-43433
Content-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin
High
CVE-2022-43432
Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin
Low
CVE-2022-43426
AWS secrets displayed without masking by Jenkins S3 Explorer Plugin
High
CVE-2022-43430
XXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin
High
CVE-2022-43415
XXE vulnerability in Jenkins REPO Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.