Medium
CVE-2022-0860
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,837
Reset filters
High
CVE-2022-25508
Improper Authentication in FreeTAKServer
High
CVE-2022-25510
Hard coded credentials in FreeTAKServer
High
CVE-2022-26662
XML Entity Expansion in trytond and proteus
Medium
CVE-2022-26661
Improper Restriction of XML External Entity Reference in trytond and proteus
High
CVE-2021-38296
Authentication Bypass by Capture-replay in Apache Spark
Critical
CVE-2022-0766
Server-Side Request Forgery in calibreweb
Critical
CVE-2022-0767
Server-Side Request Forgery in calibreweb
Medium
CVE-2022-24737
Exposure of Sensitive Information to an Unauthorized Actor in httpie
Medium
CVE-2022-0697
Open Redirect in archivy
Critical
CVE-2022-0845
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.
High
CVE-2022-21716
Twisted SSH client and server deny of service during SSH handshake.
Medium
CVE-2021-3620
Ansible discloses sensitive information in traceback error message
Medium
CVE-2022-0577
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Medium
ghsa-mfjm-vh54-3f96
Scrapy cookie-setting is not restricted based on the public suffix list
Medium
CVE-2022-24710
Cross-site Scripting in Weblate
High
CVE-2022-24288
OS Command injection in Apache Airflow
Medium
CVE-2021-45229
Apache Airflow Cross-site Scripting Vulnerability
Medium
CVE-2022-23653
B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases of the B2 command-line tool version 3.2.0 and below contain a key disclosure vuln
Medium
CVE-2022-23651
b2-sdk-python TOCTOU application key disclosure
High
CVE-2022-0736
Insecure Temporary File in mlflow
High
CVE-2021-45083
Incorrect Default Permissions in Cobbler
High
CVE-2021-45082
Command Injection in Cobbler
High
ghsa-7p79-6x2v-5h88
Server crash if running Python 3.10 w/ Sanic 20.12
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.