High
CVE-2022-21810
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2022-25894
Remote Code Execution in com.bstek.uflo:uflo-core
High
CVE-2022-25882
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory
High
CVE-2022-25350
Command Injection in puppet-facter
High
CVE-2022-25860
simple-git < 3.16.0 - Remote Code Execution
Critical
CVE-2022-25908
Command Injection in create-choo-electron
Critical
CVE-2022-25962
Command injection in vagrant.js
Medium
CVE-2022-25847
Cross-site Scripting (XSS) in serve-lite
High
CVE-2022-47042
Arbitrary file write in net.mingsoft:ms-mcms
High
CVE-2023-24422
Sandbox bypass in Jenkins Script Security Plugin
Critical
CVE-2023-24441
XML external entity vulnerability on agents in Jenkins MSTest Plugin
Medium
CVE-2023-24425
Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin
Medium
CVE-2023-24437
Cross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps Plugin
High
CVE-2023-24444
Session fixation vulnerability in Jenkins OpenID Plugin
Critical
CVE-2023-24456
Session fixation vulnerability in Jenkins Keycloak Authentication Plugin
Medium
CVE-2023-24436
Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs
High
CVE-2023-24434
CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin
Critical
CVE-2023-24443
XML Entity Expansion in Jenkins TestComplete support Plugin
Medium
CVE-2023-24423
Cross-site request forgery in Jenkins Gerrit Trigger Plugin
High
CVE-2023-24432
CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials
Medium
CVE-2023-24455
Path Traversal in Jenkins visualexpert Plugin
Medium
CVE-2023-24454
Plaintext Storage of a Password in Jenkins TestQuality Updater Plugin
Medium
CVE-2023-24453
Missing permission check in Jenkins TestQuality Updater Plugin
High
CVE-2023-24452
CSRF vulnerability in Jenkins TestQuality Updater Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.