Medium
CVE-2022-41250
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Medium
CVE-2022-41249
Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery
High
CVE-2022-40955
Apache InLong vulnerable to Deserialization of Untrusted Data
High
CVE-2022-36091
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
Critical
CVE-2022-36099
XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability
Critical
CVE-2022-36100
XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection
High
CVE-2022-25897
Eclipse Milo vulnerable to Resource Exhaustion (Denial of Service)
Medium
CVE-2022-37724
Project Wonder WebObjects vulnerable to Arbitrary HTTP Header Injection and Cross-site Scripting
High
CVE-2022-28220
Apache James vulnerable to buffering attack
Critical
CVE-2022-36663
Gluu Oxauth before v4.4.1 vulnerable to Server-Side Request Forgery attacks via a crafted request_uri parameter
Medium
CVE-2022-38749
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write
High
CVE-2022-38369
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Medium
CVE-2022-36033
jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled
Critical
CVE-2022-37021
Apache Geode vulnerable to Deserialization of Untrusted Data
Low
CVE-2021-3644
wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault
High
CVE-2022-0084
XNIO `notifyReadClosed` method logging message to unexpected end
High
CVE-2021-25642
Deserialization of Untrusted Data in Apache Hadoop YARN
Medium
CVE-2022-35278
HTML Injection in ActiveMQ Artemis Web Console
Critical
CVE-2022-34916
Remote code execution in Apache Flume
High
CVE-2022-37422
Path Traversal in Payara
High
CVE-2022-31195
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
High
CVE-2022-31194
JSPUI vulnerable to path traversal in submission (resumable) upload
High
CVE-2022-2053
Undertow vulnerable to Dos via Large AJP request
Critical
CVE-2022-31183
fs2-io skips mTLS client verification
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.