Medium
CVE-2022-4362
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-38454
Kraken.io Image Optimizer <= 2.6.5 - Cross-Site Request Forgery
Medium
CVE-2023-24375
WordPress Social Login and Register <=7.5.12 - Missing Authorization to Plugin Settings Update
Medium
CVE-2022-36340
MailOptin <= 1.2.49.0 - Missing Authorization to Cache Deletion
High
CVE-2022-40604
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Medium
CVE-2022-40754
In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.
Low
CVE-2022-2872
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3.
High
CVE-2022-3068
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3.
Medium
CVE-2022-2888
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.
Medium
CVE-2022-3255
Pimcore vulnerable to cross site scripting
Medium
CVE-2022-41244
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
Low
CVE-2022-41247
Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted
Medium
CVE-2022-41238
Lack of authentication mechanism in Jenkins DotCi Plugin webhook
Medium
CVE-2022-41235
Jenkins WildFly Deployer Plugin vulnerable to path traversal
Medium
CVE-2022-41230
Missing permission check in Jenkins build-publisher Plugin
Medium
CVE-2022-41242
Jenkins extreme-feedback Plugin vulnerable to Missing Authorization
High
CVE-2022-41240
Stored XSS vulnerability in Jenkins Walti plugin
High
CVE-2022-41237
RCE vulnerability in Jenkins DotCi Plugin
High
CVE-2022-41239
Stored XSS vulnerability in Jenkins DotCi Plugin
High
CVE-2022-41226
Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference
High
CVE-2022-41224
Jenkins vulnerable to stored cross site scripting in the I:helpIcon component
Medium
CVE-2022-41246
CSRF vulnerability and mM
Medium
CVE-2022-41245
CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials
Medium
CVE-2022-41243
Jenkins SmallTest Plugin missing hostname validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.