Alta
CVE-2022-2053
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtros
Alta
CVE-2022-34158
Apache JSPWiki CSRF due to crafted invocation on the Image plugin
Media
CVE-2022-27166
Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp
Media
CVE-2022-28732
Apache JSPWiki XSS due to crafted request in WeblogPlugin
Media
CVE-2022-28731
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
Media
CVE-2022-28730
Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369
Crítica
CVE-2022-31183
fs2-io skips mTLS client verification
Baja
CVE-2022-36885
Jenkins GitHub plugin uses weak webhook signature function
Media
CVE-2022-36883
Lack of authentication mechanism in Jenkins Git Plugin webhook
Media
CVE-2022-36882
Lack of authentication mechanism in Jenkins Git Plugin webhook
Media
CVE-2022-36884
Lack of authentication mechanism in Jenkins Git Plugin webhook
Media
CVE-2022-36888
Jenkins HashiCorp Vault Plugin does not perform permission checks in several HTTP endpoints that perform Vault connection tests
Media
CVE-2022-36910
Lucene-Search Plugin does not perform permission checks in several HTTP endpoints
Media
CVE-2022-36900
Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure
Media
CVE-2022-36890
Jenkins Deployer Framework Plugin vulnerable to Path Traversal
Alta
CVE-2022-36921
Missing permission check in Coverity Plugin allows capturing credentials
Alta
CVE-2022-36920
Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)
Crítica
CVE-2022-34113
Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
Crítica
CVE-2022-34115
Dataease v1.11.1 SQL Injection via parameter dataSourceId
Alta
CVE-2022-34114
SQL Injection found in Dataease
Media
CVE-2022-34112
Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
Crítica
CVE-2022-35912
Grails framework Remote Code Execution via Data Binding
Media
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
Alta
CVE-2021-3859
Undertow vulnerable to Denial of Service (DoS) attacks
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.