Critical
CVE-2022-22880
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Critical
CVE-2022-22881
SQL Injection in Jeecg-boot
High
CVE-2022-25173
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin
High
CVE-2022-25174
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin
High
CVE-2022-25175
Jenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection
Medium
CVE-2022-25177
Improper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries Plugin
Medium
CVE-2022-25176
Improper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin
Medium
CVE-2022-25179
Link Following in Jenkins Pipeline Multibranch Plugin
Medium
CVE-2022-25178
Improper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries Plugin
Medium
CVE-2022-25180
Jenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials
High
CVE-2022-25181
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
High
CVE-2022-25182
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
High
CVE-2022-25183
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Medium
CVE-2022-25185
Stored XSS vulnerability in Jenkins Generic Webhook Trigger Plugin
Medium
CVE-2022-25184
Password parameter default values exposed by Jenkins Pipeline: Build Step Plugin
Medium
CVE-2022-25187
Jenkins Support Core Plugin stores sensitive data in plain text
Low
CVE-2022-25186
Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin
Medium
CVE-2022-25188
Path traversal vulnerability in Jenkins Fortify Plugin
High
CVE-2022-25189
Stored Cross-site Scripting vulnerability in Jenkins Custom Checkbox Parameter Plugin
Medium
CVE-2022-25190
Missing permission check in Jenkins Conjur Secrets Plugin allows enumerating credentials IDs
High
CVE-2022-25191
Stored Cross-site Scripting vulnerability in Jenkins Agent Server Parameter Plugin
Medium
CVE-2022-25192
Jenkins Snow Commander Plugin 2.0 vulnerable to Cross-Site Request Forgery
Medium
CVE-2022-25193
Jenkins Snow Commander Plugin prior to 2.0 vulnerable to Missing Authorization
High
CVE-2022-25194
CSRF vulnerability in Jenkins autonomiq plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.