Media
CVE-2022-41243
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2022-41241
Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference
Media
CVE-2022-41236
CSRF vulnerability in Jenkins Security Inspector plugin
Media
CVE-2022-41234
Missing webhook endpoint authorization in Jenkins Rundeck Plugin
Media
CVE-2022-41233
Jenkins Rundeck Plugin Missing Authorization vulnerability
Alta
CVE-2022-41232
Jenkins build-publisher plugin vulnerable to cross-site request forgery
Media
CVE-2022-41231
Path traversal in Jenkins build-publisher Plugin
Alta
CVE-2022-41229
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting
Media
CVE-2022-41228
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization
Media
CVE-2022-41227
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery
Alta
CVE-2022-41225
Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting
Baja
CVE-2022-41248
Jenkins BigPanda Notifier Plugin Missing Password Field Masking
Baja
CVE-2022-41255
API token stored in plain text by Jenkins CONS3RT Plugin
Media
CVE-2022-41251
Jenkins Apprenda Plugin has Missing Authorization vulnerability
Media
CVE-2022-41254
Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials
Media
CVE-2022-41253
CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials
Media
CVE-2022-41252
Missing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDs
Media
CVE-2022-41250
Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentials
Media
CVE-2022-41249
Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery
Baja
CVE-2022-31679
Spring Data REST can expose hidden entity attributes
Alta
CVE-2022-34917
Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service
Alta
CVE-2022-40955
Apache InLong vulnerable to Deserialization of Untrusted Data
Alta
CVE-2022-31166
XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups
Alta
CVE-2022-31167
XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.