Crítica
CVE-2022-27263
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.646
Crítica
CVE-2022-27139
Arbitrary file upload in Ghost
Alta
CVE-2022-27261
Express-FileUpload Arbitrary File Overwrite
Crítica
CVE-2022-27260
Unrestricted Upload of File with Dangerous Type in ButterCMS
Crítica
CVE-2022-28397
Arbitrary file upload in Ghost
Crítica
CVE-2022-27952
Unrestricted Upload of File with Dangerous Type in Payload
Alta
CVE-2022-29039
Stored Cross-site Scripting vulnerability in Jenkins Gerrit Trigger Plugin
Media
CVE-2022-29038
Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin
Media
CVE-2022-29037
Stored XSS in Jenkins CVS Plugin
Media
CVE-2022-29036
Cross-site Scripting in Jenkins Credentials Plugin
Media
CVE-2022-29042
Stored Cross-site Scripting vulnerability in Jenkins Job Generator Plugin
Media
CVE-2022-29043
Stored Cross-site Scripting in Jenkins Mask Passwords Plugin
Media
CVE-2022-29040
Stored XSS vulnerability in Jenkins Git Parameter Plugin
Media
CVE-2022-29041
Stored Cross-site Scripting vulnerability in Jenkins Jira Plugin
Media
CVE-2022-29046
Stored Cross-site Scripting vulnerability in Jenkins Subversion Plugin
Alta
CVE-2022-29047
Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
Media
CVE-2022-29048
CSRF vulnerability in Jenkins Subversion Plugin
Media
CVE-2022-29044
Stored Cross-site Scripting in Jenkins Node and Label parameter Plugin
Alta
CVE-2022-29049
Promotion names in Jenkins promoted builds Plugin are not validated when using Job DSL
Media
CVE-2022-29051
Missing permission checks in Jenkins Publish Over FTP Plugin
Alta
CVE-2022-29050
CSRF vulnerability in Jenkins Publish Over FTP Plugin
Alta
CVE-2022-29045
Stored Cross-site Scripting vulnerability in Jenkins Promoted Builds Plugin
Media
CVE-2022-0436
Path Traversal in Grunt
Media
CVE-2022-1330
Cross-site Scripting in fullpage.js
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.