Media
CVE-2022-43414
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Alta
CVE-2022-43428
Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz for Total Test Plugin
Alta
CVE-2022-43407
CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin
Alta
CVE-2022-43429
Jenkins Compuware Topaz for Total Test Plugin vulnerable to Protection Mechanism Failure
Media
CVE-2022-43423
Agent-to-controller security bypass vulnerability in Jenkins BMC Compuware Source Code Download for Endevor, PDS, and ISPW Plugin
Media
CVE-2022-43413
Jenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
Baja
CVE-2022-43411
Non-constant time webhook token comparison in Jenkins GitLab Plugin
Media
CVE-2022-43431
Jenkins Compuware Strobe Measurement Plugin Missing Authorization vulnerability
Alta
CVE-2022-43409
Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin
Media
CVE-2022-43424
Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin
Alta
CVE-2022-43433
Content-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin
Alta
CVE-2022-43432
Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin
Alta
CVE-2022-43425
Stored XSS vulnerability in Jenkins Custom Checkbox Parameter Plugin
Media
CVE-2022-43421
Jenkins Tuleap Git Branch Source Plugin allows unauthenticated attackers to trigger Tuleap projects whose configured repo matches attacker-specified value
Baja
CVE-2022-43412
Non-constant time webhook token comparison in Jenkins Generic Webhook Trigger Plugin
Crítica
CVE-2022-43403
Jenkins Script Security Plugin sandbox bypass vulnerability
Alta
CVE-2022-43406
Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
Alta
CVE-2022-43405
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin
Alta
CVE-2022-43404
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Crítica
CVE-2022-43402
Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution
Alta
CVE-2022-43401
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Baja
CVE-2022-43426
AWS secrets displayed without masking by Jenkins S3 Explorer Plugin
Alta
CVE-2022-43408
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins
Alta
CVE-2022-43430
XXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.