Medium
CVE-2022-25195
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Medium
CVE-2022-25196
Open redirect vulnerability in Jenkins GitLab Authentication Plugin
High
CVE-2022-25198
CSRF vulnerability in Jenkins SCP publisher Plugin
Medium
CVE-2022-25197
Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files
Medium
CVE-2022-25200
CSRF vulnerability in Jenkins Checkmarx Plugin allow capturing credentials
High
CVE-2022-25199
Missing permission check in Jenkins SCP publisher Plugin
Medium
CVE-2022-25202
Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds (Simple) Plugin
Medium
CVE-2022-25201
Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials
Medium
CVE-2022-25204
Protection Mechanism Failure in Jenkins Doktor Plugin
Medium
CVE-2022-25203
Stored Cross-site Scripting vulnerability in Jenkins Team Views Plugin
High
CVE-2022-25205
Cross-Site Request Forgery in Jenkins dbCharts Plugin
High
CVE-2022-25206
Missing Authorization in Jenkins dbCharts Plugin
High
CVE-2022-25207
CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE
High
CVE-2022-25208
Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE
Low
CVE-2022-25210
Improper Synchronization in Jenkins Convertigo Mobile Platform Plugin
High
CVE-2022-25209
Improper Restriction of XML External Entity Reference in Jenkins Chef Sinatra
Medium
CVE-2022-25211
Missing permission check in Jenkins SWAMP Plugin allows capturing credentials
Medium
CVE-2022-25212
CSRF vulnerability in Jenkins SWAMP Plugin allows capturing credentials
High
CVE-2020-10714
Session Fixation in WildFly Elytron
High
CVE-2020-1748
Incorrect Authorization in WildFly Elytron
Medium
CVE-2020-25640
Wildfly logs plaintext passwords
Medium
CVE-2020-14338
Improper Input Validation in Xerces
Critical
CVE-2021-44521
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
High
CVE-2022-24289
Deserialization of untrusted data in Apache Cayenne
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.