CVE Vulnerability Database
Search and browse 394,640 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
25,073 records from 2022Clear filters
- CVE-2022-38202High 7.5Dec 28, 2022There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may allow a remote, unauthenticated attacker traverse the file system to access files outside of the intended directory on ArcGIS Server. This could lead to the disclosure of sensitive site configuration information (not user datasets).
- CVE-2021-4294Medium 5.9Dec 28, 2022A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The manipulation of the argument secret leads to observable timing discrepancy. The name of the patch is 8612686d6dda34ae9ef6b5a974e4b7accb4fea29. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216987.
- CVE-2022-4814Medium 4.3Dec 28, 2022Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4813Medium 4.3Dec 28, 2022Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4812Medium 6.5Dec 28, 2022Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4811Medium 5.4Dec 28, 2022Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1.
- CVE-2022-4810Medium 4.3Dec 28, 2022Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4809High 8.8Dec 28, 2022Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4808High 8.8Dec 28, 2022Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4807Medium 4.3Dec 28, 2022Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4806Medium 5.3Dec 28, 2022Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4805Medium 4.3Dec 28, 2022Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4804Medium 5.3Dec 28, 2022Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4803High 8.8Dec 28, 2022Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4802Medium 5.4Dec 28, 2022Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4801Medium 5.3Dec 28, 2022Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4800Medium 6.5Dec 28, 2022Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4799Medium 6.5Dec 28, 2022Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4798Medium 5.3Dec 28, 2022Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4797Medium 4.3Dec 28, 2022Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4796High 8.1Dec 28, 2022Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2018-25056Medium 6.1Dec 28, 2022A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pypi/metadata.py. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a0fe129055a99f429133a5c40cb13b44611ff796. It is recommended to apply a patch to fix this issue. VDB-216966 is the identifier assigned to this vulnerability.
- CVE-2018-25055Medium 6.1Dec 28, 2022A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file packages/forms/solrProSearch.cfc of the component Search Handler. The manipulation of the argument suggestion leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.6.0 is able to address this issue. The name of the patch is b8f3d61511c9b02b781ec442bfb803cbff8e08d5. It is recommended to upgrade the affected component. The identifier VDB-216961 was assigned to this vulnerability.
- CVE-2018-25054Medium 5.4Dec 28, 2022A vulnerability was found in shred cilla. It has been classified as problematic. Affected is an unknown function of the file cilla-xample/src/main/webapp/WEB-INF/jsp/view/search.jsp of the component Search Handler. The manipulation of the argument details leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is d345e6bc7798bd717a583ec7f545ca387819d5c7. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216960.
- CVE-2018-25053Medium 6.1Dec 28, 2022A vulnerability was found in moappi Json2html up to 1.1.x and classified as problematic. This issue affects some unknown processing of the file json2html.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.2.0 is able to address this issue. The name of the patch is 2d3d24d971b19a8ed1fb823596300b9835d55801. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216959.