High
CVE-2022-25762
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2014-0193
Netty denial of service vulnerability
Medium
CVE-2018-8036
Loop with Unreachable Exit Condition in Apache PDFBox
High
CVE-2018-8028
Apache Sentry may allow attacker to access/remove data from Sentry protected table
Critical
CVE-2018-8016
Missing Authentication for Critical Function in Apache Cassandra
High
CVE-2018-3258
Improper Privilege Management in MySQL Connectors Java
Medium
CVE-2018-1999047
Incorrect Authorization in Jenkins
High
CVE-2018-1999040
Exposure of Sensitive Information in Jenkins Kubernetes Plugin
Low
CVE-2018-1999036
Jenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build log
Medium
CVE-2018-1999032
Jenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks
Medium
CVE-2018-1999044
Infinite Loop in Jenkins Core
Medium
CVE-2018-1999030
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checks
High
CVE-2018-1999028
Jenkins Accurev Plugin CSRF vulnerability and missing permission checks
High
CVE-2018-1999043
Missing Release of Resource after Effective Lifetime in Jenkins
High
CVE-2018-1340
Missing Encryption of Sensitive Data in Apache Guacamole
Critical
CVE-2018-12972
OpenTSDB vulnerable to OS Command Injection
Critical
CVE-2018-1297
Missing certificate validation in Apache JMeter
Critical
CVE-2018-1287
Missing certificate validation in Apache JMeter
Medium
CVE-2018-1286
Apache OpenMeetings may allow authenticated attacker to deny service for privileged users
High
CVE-2018-11047
Cloud Foundry UAA accepts refresh token as access token on admin endpoints
High
CVE-2018-1000865
Improper Privilege Management in Jenkins
High
CVE-2018-1000866
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
Medium
CVE-2018-1000864
Loop with Unreachable Exit Condition in Jenkins
High
CVE-2018-1000863
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.