High
CVE-2022-36379
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-1628
Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-2557
Team - WordPress Team Member Showcase Plugin <= 4.1.1 - Directory Traversal to Arbitrary File Read/Deletion
Medium
41f6e826-9326-40fa-80d0-4cff1dd72536
WordPress Button Plugin MaxButtons <= 9.2 - Shortcode-Based Cross-Site Scripting
High
CVE-2022-34971
Feehi CMS arbitrary code execution via crafted PHP file
Medium
CVE-2022-34529
WASM3 v0.5.0 was discovered to contain a segmentation fault via the component Compile_Memory_CopyFill.
Low
CVE-2022-36885
Jenkins GitHub plugin uses weak webhook signature function
Medium
CVE-2022-36887
Jenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints
Medium
CVE-2022-36883
Lack of authentication mechanism in Jenkins Git Plugin webhook
Medium
CVE-2022-36882
Lack of authentication mechanism in Jenkins Git Plugin webhook
Medium
CVE-2022-36881
Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
Medium
CVE-2022-36884
Lack of authentication mechanism in Jenkins Git Plugin webhook
Medium
CVE-2022-36888
Jenkins HashiCorp Vault Plugin does not perform permission checks in several HTTP endpoints that perform Vault connection tests
Medium
CVE-2022-36886
External Monitor Job Type Plugin does not require POST requests for an HTTP endpoint
Medium
CVE-2022-36891
Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs
Medium
CVE-2022-36896
Jenkins Compuware Source Code Download is missing authorization
Medium
CVE-2022-36904
Jenkins Repository Connector Plugin does not perform a permission check in a method implementing form validation
Medium
CVE-2022-36913
Jenkins Openstack Heat Plugin does not perform permission checks in methods implementing form validation
Medium
CVE-2022-36898
Jenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpoints
Medium
CVE-2022-36918
Jenkins Buckminster Plugin does not perform a permission check in a method implementing form validation
Low
CVE-2022-36901
Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted
High
CVE-2022-36922
Jenkins Lucene-Search Plugin vulnerable to reflected (XSS) cross-site scripting
Medium
CVE-2022-36917
Jenkins Google Cloud Backup Plugin allows attackers with Overall/Read permission to request a manual backup.
Medium
CVE-2022-36919
Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.