Media
CVE-2022-45396
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Alta
CVE-2022-45387
Jenkins BART Plugin vulnerable to cross-site scripting (XSS)
Crítica
CVE-2022-45395
XML External Entity Reference in Jenkins CCCC Plugin
Alta
CVE-2022-45401
Jenkins Associated Files Plugin vulnerable to cross-site scripting (XSS)
Media
CVE-2022-45397
XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin
Media
CVE-2022-45385
Lack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin
Media
CVE-2022-45384
Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords
Media
CVE-2022-45399
Jenkins Cluster Statistics Plugin Missing Authorization vulnerability
Media
CVE-2022-45393
Cross-Site Request Forgery in Jenkins Delete log Plugin
Media
CVE-2022-45389
Missing Authorization in Jenkins XP-Dev Plugin
Media
CVE-2022-45392
Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin
Media
CVE-2022-45391
Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally
Media
CVE-2022-45394
Missing permission check in Jenkins Delete log Plugin
Media
CVE-2022-45386
XML External Entity Reference in Jenkins Violations Plugin
Alta
CVE-2022-45388
Jenkins Config Rotator Plugin vulnerable to path traversal
Media
CVE-2022-45383
Incorrect permission checks in Jenkins Support Core Plugin
Alta
CVE-2022-45380
Jenkins JUnit Plugin subject to Cross-site Scripting via URL conversion
Alta
CVE-2022-45381
Arbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin
Media
CVE-2022-45382
Cross-site Scripting in Jenkins Naginator Plugin
Alta
CVE-2022-45379
Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
Media
CVE-2022-38666
SSL/TLS certificate validation unconditionally disabled by Jenkins NS-ND Integration Performance Publisher Plugin
Crítica
CVE-2022-45047
Unsafe deserialization in Apache MINA SSHD
Media
CVE-2022-40309
Apache Archiva subject to arbitrary directory deletion by users.
Alta
CVE-2022-40308
Apache Archiva vulnerable to Sensitive Information Disclosure via anonymous user
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.