Low
CVE-2022-34799
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2022-34785
Jenkins build-metrics Plugin Missing Authorization vulnerability
Low
CVE-2022-34801
Cleartext Storage of Sensitive Information in Jenkins Build Notifications Plugin
High
CVE-2022-34791
Cross-site Scripting in Jenkins Validating Email Parameter Plugin
Medium
CVE-2022-34781
Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
Medium
CVE-2022-34780
CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
Critical
CVE-2022-32532
Improper Authorization in Apache Shiro
Low
CVE-2022-33879
Apache Tika contains incomplete fix for regex DoS
High
CVE-2022-26477
SystemDS CPU exhaustion vulnerability
Low
CVE-2022-34213
Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text
High
CVE-2022-34170
Cross-site Scripting vulnerability in Jenkins
Medium
CVE-2022-34174
Observable timing discrepancy allows determining username validity in Jenkins
High
CVE-2022-34175
Unauthorized view fragment access in Jenkins
Medium
CVE-2022-34199
Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin
Medium
CVE-2022-34180
Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement
High
CVE-2022-34173
Cross-site Scripting vulnerability in Jenkins
High
CVE-2022-34172
Cross-site Scripting vulnerability in Jenkins
High
CVE-2022-34171
Cross-site Scripting vulnerability in Jenkins
Low
CVE-2022-34202
User passwords stored in plain text by Jenkins EasyQA Plugin
Medium
CVE-2022-34181
Agent-to-controller security bypass in Jenkins xUnit Plugin
High
CVE-2022-34177
Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin
Critical
CVE-2022-22980
SpEL Injection in Spring Data MongoDB
Medium
CVE-2022-26850
Insufficiently Protected Credentials via Insecure Temporary File in org.apache.nifi:nifi-single-user-utils
High
CVE-2022-31044
Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.