Medium
CVE-2022-43427
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2022-43422
Agent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin
High
CVE-2022-43420
Stored XSS vulnerability in Jenkins Contrast Continuous Application Security Plugin
High
CVE-2022-43415
XXE vulnerability in Jenkins REPO Plugin
Medium
CVE-2022-43410
Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin
Medium
CVE-2022-43419
API keys stored in plain text by Jenkins Katalon Plugin
High
CVE-2022-43434
Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin
High
CVE-2022-43416
Jenkins Katalon Plugin vulnerable to Protection Mechanism Failure
High
CVE-2022-43435
Content-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine Plugin
Medium
CVE-2022-43418
CSRF vulnerability in Jenkins Katalon Plugin allows capturing credentials
Medium
CVE-2022-43417
Missing permission checks in Jenkins Katalon Plugin allow capturing credentials
Medium
CVE-2022-42117
Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module
Medium
CVE-2022-42115
Liferay Portal Vulnerable to XSS in the Object Module
Medium
CVE-2022-42116
Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module
Medium
CVE-2022-42112
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
Medium
CVE-2022-42114
Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module
Medium
CVE-2022-42113
Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module
Critical
CVE-2022-39198
Hessian Lite for Apache Dubbo deserialization vulnerability
Medium
CVE-2022-42467
Apache Isis webconsole module may directly query the database in prototype mode
Medium
CVE-2022-42466
Apache Isis Cross-site Scripting vulnerability
Critical
CVE-2022-39312
MySQL JDBC deserialization vulnerability
Critical
CVE-2022-42889
Arbitrary code execution in Apache Commons Text
Critical
CVE-2024-23679
com.enonic.xp:lib-auth vulnerable to Session Fixation
High
CVE-2022-41828
com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.