Medium
CVE-2022-45825
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2023-24387
Organization chart <= 1.4.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-22697
Survey Maker <= 3.2.0 - Missing Authorization
Medium
CVE-2023-24415
ChatBot <= 4.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Settings Reset
Medium
CVE-2021-36686
Cross-site Scripting in yapi-vendor
Critical
CVE-2020-22452
phpmyadmin contains SQL Injection vulnerability
High
CVE-2022-21192
Directory Traversal vulnerability in serve-lite
High
CVE-2022-21810
Command injection in smartctl
Critical
CVE-2022-25894
Remote Code Execution in com.bstek.uflo:uflo-core
High
CVE-2022-25882
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory
High
CVE-2022-25350
Command Injection in puppet-facter
High
CVE-2022-25860
simple-git < 3.16.0 - Remote Code Execution
Critical
CVE-2022-25908
Command Injection in create-choo-electron
Critical
CVE-2022-25962
Command injection in vagrant.js
Medium
CVE-2022-25847
Cross-site Scripting (XSS) in serve-lite
High
CVE-2022-47042
Arbitrary file write in net.mingsoft:ms-mcms
High
CVE-2023-24422
Sandbox bypass in Jenkins Script Security Plugin
Critical
CVE-2023-24441
XML external entity vulnerability on agents in Jenkins MSTest Plugin
Medium
CVE-2023-24425
Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin
Medium
CVE-2023-24437
Cross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps Plugin
High
CVE-2023-24444
Session fixation vulnerability in Jenkins OpenID Plugin
Critical
CVE-2023-24456
Session fixation vulnerability in Jenkins Keycloak Authentication Plugin
Medium
CVE-2023-24436
Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs
High
CVE-2023-24434
CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.