High
CVE-2022-2053
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2022-34158
Apache JSPWiki CSRF due to crafted invocation on the Image plugin
Medium
CVE-2022-27166
Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp
Medium
CVE-2022-28732
Apache JSPWiki XSS due to crafted request in WeblogPlugin
Medium
CVE-2022-28731
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
Medium
CVE-2022-28730
Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369
Critical
CVE-2022-31183
fs2-io skips mTLS client verification
Low
CVE-2022-36885
Jenkins GitHub plugin uses weak webhook signature function
Medium
CVE-2022-36883
Lack of authentication mechanism in Jenkins Git Plugin webhook
Medium
CVE-2022-36882
Lack of authentication mechanism in Jenkins Git Plugin webhook
Medium
CVE-2022-36884
Lack of authentication mechanism in Jenkins Git Plugin webhook
Medium
CVE-2022-36888
Jenkins HashiCorp Vault Plugin does not perform permission checks in several HTTP endpoints that perform Vault connection tests
Medium
CVE-2022-36910
Lucene-Search Plugin does not perform permission checks in several HTTP endpoints
Medium
CVE-2022-36900
Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure
Medium
CVE-2022-36890
Jenkins Deployer Framework Plugin vulnerable to Path Traversal
High
CVE-2022-36921
Missing permission check in Coverity Plugin allows capturing credentials
High
CVE-2022-36920
Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)
Critical
CVE-2022-34113
Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
Critical
CVE-2022-34115
Dataease v1.11.1 SQL Injection via parameter dataSourceId
High
CVE-2022-34114
SQL Injection found in Dataease
Medium
CVE-2022-34112
Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
Critical
CVE-2022-35912
Grails framework Remote Code Execution via Data Binding
Medium
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
High
CVE-2021-3859
Undertow vulnerable to Denial of Service (DoS) attacks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.