High
CVE-2023-22602
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 278
Reset filters
Critical
CVE-2018-25068
globalpom-utils has Insecure Temporary File
Critical
CVE-2022-36437
Hazelcast connection caching
High
CVE-2022-41932
Creation of new database tables through login form on PostgreSQL
Critical
CVE-2022-41930
Missing Authorization to enable or disable users in org.xwiki.platform:xwiki-platform-user-profile-ui
High
CVE-2022-45381
Arbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin
High
CVE-2022-45129
Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF
High
CVE-2022-37866
Apache Ivy vulnerable to path traversal
Medium
CVE-2022-39259
Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack
Critical
CVE-2022-42889
Arbitrary code execution in Apache Commons Text
Medium
CVE-2022-28731
Apache JSPWiki CSRF due to crafted request on UserPreferences.jsp
High
CVE-2021-34538
Apache Hive before 3.1.3 `CREATE` and `DROP` function operations do not check for necessary authorization.
High
CVE-2022-31159
Partial Path Traversal in com.amazonaws:aws-java-sdk-s3
High
CVE-2022-2191
Jetty SslConnection does not release pooled ByteBuffers in case of errors
Low
CVE-2022-2047
Jetty invalid URI parsing may produce invalid HttpURI.authority
Critical
CVE-2022-33980
Code injection in Apache Commons Configuration
High
CVE-2022-26477
SystemDS CPU exhaustion vulnerability
High
CVE-2022-31044
Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0
Medium
CVE-2019-10402
Improper Neutralization of Input During Web Page Generation in Jenkins
Medium
CVE-2019-10401
Improper Neutralization of Input During Web Page Generation in Jenkins
Medium
CVE-2021-21683
Path traversal vulnerability on Windows in Jenkins
Medium
CVE-2021-29051
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App
Medium
CVE-2021-21634
Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin
Medium
CVE-2021-21606
Arbitrary file existence check in file fingerprints in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.