High
CVE-2018-1000424
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2018-1000418
Jenkins HipChat Plugin allows credential capture due to incorrect authorization
Medium
CVE-2018-1000149
Jenkins Ansible Plugin man in the middle vulnerability
High
CVE-2018-1000073
RubyGems Link Following vulnerability
Medium
CVE-2018-1000015
Incorrect permission checks in Pipeline: Nodes and Processes plugin
Medium
CVE-2017-1000105
Missing Authorization in Jenkins Blue Ocean Plugin
High
CVE-2017-15695
Apache Geode vulnerable to Incorrect Authorization
Medium
CVE-2017-1000400
Missing Authorization in Jenkins
Medium
CVE-2017-1000388
Jenkins Dependency Graph Viewer plugin vulnerable to missing permission checks
Medium
CVE-2017-1000243
Missing permission check in Jenkins Favorite Plugin
Medium
CVE-2017-1000390
Jenkins Multijob plugin did not check permissions in the Resume Build action
High
CVE-2017-1000086
Missing permission checks in Jenkins Periodic Backup Plugin allow every user to change settings
Critical
Exploited in attacks
CVE-2018-14667
Richfaces vulnerable to arbitrary code execution
Low
CVE-2019-1003051
Jenkins IRC Plugin stores credentials in plain text
Low
CVE-2019-1003052
Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text
Medium
CVE-2019-1003059
Missing permission check in Jenkins FTP publisher Plugin
Low
CVE-2019-1003057
Jenkins Bitbucket Approve Plugin stores credentials in plain text
Low
CVE-2019-1003060
Jenkins OWASP ZAP Plugin stores unencrypted credentials
High
CVE-2019-1003053
Jenkins HockeyApp Plugin stores credentials in plain text
Medium
CVE-2019-1003056
Jenkins WebSphere Deployer Plugin stores credentials in plain text
Low
CVE-2019-1003063
Jenkins Amazon SNS Build Notifier Plugin stores credentials in plain text
Low
CVE-2019-1003069
Jenkins Aqua Security Scanner Plugin stores credentials in plain text
Low
CVE-2019-1003070
Jenkins veracode-scanner Plugin stores credentials in plain text
Medium
CVE-2019-1003061
Jenkins CloudFormation Plugin stores credentials in plain text
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.