Medium
CVE-2022-29161
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2022-29002
Cross-Site Request Forgery in XXL-Job
Critical
CVE-2022-31267
Unescaped control characters in Gitblit
Critical
CVE-2022-22978
Authorization bypass in Spring Security
Medium
CVE-2022-22976
Integer overflow in BCrypt class in Spring Security
Medium
CVE-2022-30952
Insufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin
Low
CVE-2022-30949
Path traversal in Jenkins REPO Plugin
High
CVE-2022-30959
Missing Authorization in Jenkins SSH plugin
High
CVE-2022-30958
Cross Site Request Forgery in Jenkins SSH Plugin
Medium
CVE-2022-30951
Missing Authorization in Jenkins WMI Windows Agents plugin
High
CVE-2022-30947
Path traversal in Jenkins Git Mercurial and Repo Plugins
Medium
CVE-2022-30950
Buffer overflow in Jenkins WMI Windows Agents plugin
Low
CVE-2022-30948
Path traversal in Jenkins Mercurial Plugin
High
CVE-2022-30945
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin
Critical
CVE-2014-9390
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; m
Critical
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
Medium
CVE-2014-3652
JBoss KeyCloak Open Redirect
High
CVE-2010-3708
Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP
Medium
CVE-2011-1498
Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient
Low
CVE-2011-4457
OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled
Medium
CVE-2011-4905
Denial of Service in Apache ActiveMQ
Medium
CVE-2011-3375
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests
High
CVE-2012-1618
Unescaped parameters in the PostgreSQL JDBC driver
Medium
CVE-2012-1154
Improper Access Control in JBoss mod_cluster
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.