High
CVE-2022-31159
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Critical
CVE-2015-8031
Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2
Medium
CVE-2022-30187
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
Medium
CVE-2022-31139
UnsafeAccessor 1.4.0 until 1.7.0 has no security checking for UnsafeAccess.getInstance()
High
CVE-2022-27772
Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot
Medium
CVE-2015-5298
Jenkins Google Login Plugin 1.0 and 1.1 allows anonymous users to authenticate through client-side request modification
Medium
CVE-2021-44791
Apache Druid before 0.23.0 vulnerable to reflected XSS via unescaped URL parameters
High
CVE-2022-2048
Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service
High
CVE-2022-2191
Jetty SslConnection does not release pooled ByteBuffers in case of errors
Low
CVE-2022-2047
Jetty invalid URI parsing may produce invalid HttpURI.authority
High
CVE-2022-2256
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Critical
CVE-2022-31943
Unrestricted Upload of File with Dangerous Type in MCMS
Medium
CVE-2022-34803
Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability
Low
CVE-2022-34806
Plaintext Storage of a Password in Jenkins Jigomerge Plugin
Low
CVE-2022-34805
Plaintext Storage of a Password in Jenkins Skype notifier Plugin
Low
CVE-2022-34809
Password stored in plain text by Jenkins RQM Plugin
Low
CVE-2022-34807
Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin
Medium
CVE-2022-34804
Jenkins OpsGenie Plugin vulnerable to Cleartext Transmission of Sensitive Information
Medium
CVE-2022-34818
Jenkins Failed Job Deactivator Plugin Missing Authorization vulnerability
Medium
CVE-2022-34817
Cross-Site Request Forgery in Jenkins Failed Job Deactivator Plugin
Low
CVE-2022-34816
Passwords stored in plain text by Jenkins hpe-network-virtualization plugin
Low
CVE-2022-34808
Token stored in plain text by Jenkins Cisco Spark Plugin
Low
CVE-2022-34800
Plaintext Storage of a Password in Jenkins Build Notifications Plugin
Low
CVE-2022-34802
Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.