Medium
CVE-2022-28138
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-28135
Plaintext storage in Jenkins instant-messaging Plugin
Medium
CVE-2022-28137
Missing permission check in Jenkins JiraTestResultReporter Plugin
Medium
CVE-2022-28139
Missing permission check in Jenkins RocketChat Notifier Plugin
High
CVE-2022-28140
XXE vulnerability in Jenkins Flaky Test Handler Plugin
Medium
CVE-2022-28134
Missing permission checks in Jekins Bitbucket Server Integration Plugin
High
CVE-2022-28145
Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
Medium
CVE-2022-28143
CSRF vulnerability in Proxmox Plugin
Medium
CVE-2022-28144
Missing permission checks in Jenkins Proxmox Plugin
Medium
CVE-2022-28156
Path traversal in Jenkins Phoenix AutoTest Plugin
High
CVE-2022-28150
Cross site request forgery in Jenkins Job and Node ownership Plugin
High
CVE-2022-28154
enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability
Medium
CVE-2022-28153
Cross-site Scripting in Jenkins SiteMonitor Plugin
Medium
CVE-2022-28152
CSRF vulnerability in Jenkins Job and Node ownership Plugin
Medium
CVE-2022-28151
Missing permission check in Jenkins Job and Node ownership Plugin
High
CVE-2022-28149
Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin
Medium
CVE-2022-28148
Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin
Medium
CVE-2022-28147
Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin
Medium
CVE-2022-28157
Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin
Medium
CVE-2022-28158
Missing permission Jenkins Pipeline Phoenix AutoTest Plugin
Medium
CVE-2022-28159
Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin
Medium
CVE-2022-28160
Arbitrary file read vulnerability in Jenkins Tests Selector Plugin
High
CVE-2022-22934
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbit
High
CVE-2022-22941
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.