Medium
CVE-2021-21630
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2021-21626
Missing permission checks in Jenkins Warnings Next Generation Plugin allow listing workspace contents
Medium
CVE-2021-21624
Incorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some items
High
CVE-2021-21627
CSRF vulnerability in Jenkins Libvirt Agents Plugin
Medium
CVE-2021-21625
Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs
Medium
CVE-2021-21623
Incorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items
High
CVE-2021-20218
Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client
Medium
CVE-2020-27838
Keycloak discloses information without authentication
Medium
CVE-2021-21616
Stored XSS vulnerability in Jenkins Active Choices Plugin
Low
CVE-2021-21621
Support bundles can include user session IDs in Jenkins Support Core Plugin
Medium
CVE-2021-21622
Stored XSS vulnerability in Jenkins Artifact Repository Parameter Plugin
Medium
CVE-2021-21619
XSS vulnerability in Jenkins Claim Plugin
Medium
CVE-2021-21618
Stored XSS vulnerability in Jenkins Repository Connector Plugin
High
CVE-2021-21617
CSRF vulnerability in Jenkins Configuration Slicing Plugin
High
CVE-2021-3396
OpenNMS Horizon RCE via JEXL2 expression
High
CVE-2021-0341
Square OkHttp can accept the wrong certificate
Medium
CVE-2020-7021
Insertion of Sensitive Information into Log File in Elasticsearch
Medium
CVE-2020-29582
Incorrect Default Permissions in JetBrains Kotlin
Medium
CVE-2021-21615
Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins
Medium
CVE-2021-21613
XSS vulnerability in Jenkins TICS Plugin
Medium
CVE-2021-21607
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Medium
CVE-2021-21612
Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin
Medium
CVE-2021-21611
Stored XSS vulnerability in Jenkins on new item page
High
CVE-2021-21605
Path traversal vulnerability in Jenkins agent names
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.