Media
CVE-2022-41243
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.610
Media
CVE-2022-41241
Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference
Media
CVE-2022-41236
CSRF vulnerability in Jenkins Security Inspector plugin
Media
CVE-2022-41234
Missing webhook endpoint authorization in Jenkins Rundeck Plugin
Media
CVE-2022-41233
Jenkins Rundeck Plugin Missing Authorization vulnerability
Alta
CVE-2022-41232
Jenkins build-publisher plugin vulnerable to cross-site request forgery
Media
CVE-2022-41231
Path traversal in Jenkins build-publisher Plugin
Alta
CVE-2022-41229
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting
Media
CVE-2022-41228
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization
Media
CVE-2022-41227
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery
Alta
CVE-2022-41225
Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting
Media
CVE-2022-37246
Craft CMS Cross-site Scripting vulnerability
Baja
CVE-2022-41248
Jenkins BigPanda Notifier Plugin Missing Password Field Masking
Baja
CVE-2022-41255
API token stored in plain text by Jenkins CONS3RT Plugin
Media
CVE-2022-41251
Jenkins Apprenda Plugin has Missing Authorization vulnerability
Media
CVE-2022-41254
Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials
Media
CVE-2022-41253
CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials
Media
CVE-2022-41252
Missing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDs
Media
CVE-2022-41250
Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentials
Media
CVE-2022-41249
Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery
Baja
CVE-2022-31679
Spring Data REST can expose hidden entity attributes
Media
CVE-2022-3250
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.
Media
CVE-2022-3233
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
Media
CVE-2022-38061
Export Post Info <= 1.2.0 - Authenticated (Author+) CSV Injection
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.