High
CVE-2022-39246
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Critical
CVE-2022-40929
XXL-JOB contains a Command execution vulnerability in background tasks
Medium
CVE-2022-33681
Apache Pulsar Java Client vulnerable to Improper Certificate Validation
Critical
CVE-2022-36944
Scala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization
Critical
CVE-2022-23463
Nepxion Discovery vulnerable to SpEL Injection leading to Remote Code Execution
Medium
CVE-2022-23464
Nepxion Discovery vulnerable to potential Information Disclosure due to Server-Side Request Forgery
Critical
CVE-2022-36025
Besu VM vulnerable to gas allocation error in CALL operations
Medium
CVE-2022-28979
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module
Medium
CVE-2022-38512
Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module
High
CVE-2022-40705
Apache SOAP's RPCRouterServlet allows reading of arbitrary files over HTTP
Medium
CVE-2022-41230
Missing permission check in Jenkins build-publisher Plugin
High
CVE-2022-41224
Jenkins vulnerable to stored cross site scripting in the I:helpIcon component
Medium
CVE-2022-41246
CSRF vulnerability and mM
Medium
CVE-2022-41245
CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials
Medium
CVE-2022-41233
Jenkins Rundeck Plugin Missing Authorization vulnerability
High
CVE-2022-41225
Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting
Low
CVE-2022-41255
API token stored in plain text by Jenkins CONS3RT Plugin
Medium
CVE-2022-41254
Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials
Medium
CVE-2022-41253
CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials
Medium
CVE-2022-41250
Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentials
Medium
CVE-2022-41249
Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery
Low
CVE-2022-31679
Spring Data REST can expose hidden entity attributes
High
CVE-2022-31166
XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups
High
CVE-2022-31167
XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.