High
CVE-2021-3461
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Medium
CVE-2022-22950
Allocation of Resources Without Limits or Throttling in Spring Framework
Critical
Exploited in attacks
CVE-2022-22963
Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression
Medium
CVE-2021-43142
Improper Restriction of XML External Entity Reference in wutka jox
Critical
Exploited in attacks
CVE-2022-22965
Remote Code Execution in Spring Framework
High
CVE-2022-25598
Uncontrolled Resource Consumption in Apache DolphinScheduler
Medium
CVE-2022-28142
SSL/TLS certificate validation globally disabled by Jenkins Proxmox Plugin
Medium
CVE-2022-23059
Cross site scripting in Shopizer
Medium
CVE-2022-28133
Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin
Medium
CVE-2022-28146
Arbitrary file read vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
High
CVE-2022-28155
XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin
High
CVE-2022-28136
CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter Plugin
Medium
CVE-2022-28141
Password stored in plain text by Jenkins Proxmox Plugin
Medium
CVE-2022-28138
CSRF vulnerability in Jenkins RocketChat Notifier Plugin
Medium
CVE-2022-28135
Plaintext storage in Jenkins instant-messaging Plugin
Medium
CVE-2022-28137
Missing permission check in Jenkins JiraTestResultReporter Plugin
Medium
CVE-2022-28139
Missing permission check in Jenkins RocketChat Notifier Plugin
High
CVE-2022-28140
XXE vulnerability in Jenkins Flaky Test Handler Plugin
Medium
CVE-2022-28134
Missing permission checks in Jekins Bitbucket Server Integration Plugin
High
CVE-2022-28145
Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
Medium
CVE-2022-28143
CSRF vulnerability in Proxmox Plugin
Medium
CVE-2022-28144
Missing permission checks in Jenkins Proxmox Plugin
Medium
CVE-2022-28156
Path traversal in Jenkins Phoenix AutoTest Plugin
High
CVE-2022-28150
Cross site request forgery in Jenkins Job and Node ownership Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.