Medium
CVE-2022-41243
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2022-41241
Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference
Medium
CVE-2022-41236
CSRF vulnerability in Jenkins Security Inspector plugin
Medium
CVE-2022-41234
Missing webhook endpoint authorization in Jenkins Rundeck Plugin
Medium
CVE-2022-41233
Jenkins Rundeck Plugin Missing Authorization vulnerability
High
CVE-2022-41232
Jenkins build-publisher plugin vulnerable to cross-site request forgery
Medium
CVE-2022-41231
Path traversal in Jenkins build-publisher Plugin
High
CVE-2022-41229
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting
Medium
CVE-2022-41228
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization
Medium
CVE-2022-41227
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery
High
CVE-2022-41225
Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting
Low
CVE-2022-41248
Jenkins BigPanda Notifier Plugin Missing Password Field Masking
Low
CVE-2022-41255
API token stored in plain text by Jenkins CONS3RT Plugin
Medium
CVE-2022-41251
Jenkins Apprenda Plugin has Missing Authorization vulnerability
Medium
CVE-2022-41254
Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials
Medium
CVE-2022-41253
CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials
Medium
CVE-2022-41252
Missing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDs
Medium
CVE-2022-41250
Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentials
Medium
CVE-2022-41249
Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery
Low
CVE-2022-31679
Spring Data REST can expose hidden entity attributes
High
CVE-2022-34917
Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service
High
CVE-2022-40955
Apache InLong vulnerable to Deserialization of Untrusted Data
High
CVE-2022-31166
XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups
High
CVE-2022-31167
XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.