Medium
CVE-2022-43414
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2022-43428
Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin
High
CVE-2022-43407
CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin
High
CVE-2022-43429
Jenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure
Medium
CVE-2022-43423
Agent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin
Medium
CVE-2022-43413
Jenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
Low
CVE-2022-43411
Non-constant time webhook token comparison in Jenkins GitLab Plugin
Medium
CVE-2022-43431
Jenkins Compuware Strobe Measurement Plugin Missing Authorization vulnerability
High
CVE-2022-43409
Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin
Medium
CVE-2022-43424
Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin
High
CVE-2022-43433
Content-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin
High
CVE-2022-43432
Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin
High
CVE-2022-43425
Stored XSS vulnerability in Jenkins Custom Checkbox Parameter Plugin
Medium
CVE-2022-43421
Jenkins Tuleap Git Branch Source Plugin allows unauthenticated attackers to trigger Tuleap projects whose configured repo matches attacker-specified value
Low
CVE-2022-43412
Non-constant time webhook token comparison in Jenkins Generic Webhook Trigger Plugin
Critical
CVE-2022-43403
Jenkins Script Security Plugin sandbox bypass vulnerability
High
CVE-2022-43406
Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
High
CVE-2022-43405
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin
High
CVE-2022-43404
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Critical
CVE-2022-43402
Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution
High
CVE-2022-43401
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Low
CVE-2022-43426
AWS secrets displayed without masking by Jenkins S3 Explorer Plugin
High
CVE-2022-43408
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
High
CVE-2022-43430
XXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.