Low
CVE-2019-10285
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2019-10279
Missing permission check in Jenkins jenkins-reviewbot Plugin
Low
CVE-2019-10299
Jenkins CloudCoreo DeployTime Plugin stores credentials in plain text
Low
CVE-2019-10297
Jenkins Sametime Plugin stores credentials in plain text
Low
CVE-2019-10291
Jenkins Netsparker Enterprise Scan Plugin stored credentials in plain text
Low
CVE-2019-10298
Jenkins Koji Plugin stores credentials in plain text
Low
CVE-2019-10281
Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text
Medium
CVE-2019-10282
Jenkins Klaros-Testmanagement Plugin stores credentials in plain text
Low
CVE-2019-10296
Jenkins Serena SRA Deploy Plugin stores credentials in plain text
Medium
CVE-2019-10295
Jenkins crittercism-dsym Plugin stores API key in plain text
Medium
CVE-2019-10290
Missing permission check in Jenkins Netsparker Cloud Scan Plugin
High
CVE-2019-10277
Jenkins StarTeam Plugin stores credentials in plain text
High
CVE-2019-10294
Jenkins Kmap Plugin stores credentials in plain text
High
CVE-2019-10280
Jenkins Assembla Auth Plugin stores credentials in plain text
High
CVE-2016-6816
Improper Input Validation in Apache Tomcat
Critical
Exploited in attacks
CVE-2016-8735
Apache Tomcat Improper Access Control vulnerability
Medium
CVE-2018-1067
Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow
Critical
Exploited in attacks
CVE-2013-2251
Code injection in Apache Struts
Critical
Exploited in attacks
CVE-2019-1003030
Sandbox bypass in Jenkins Pipeline: Groovy Plugin
Medium
CVE-2010-1870
Server side object manipulation in Apache Struts
High
CVE-2019-7611
Improper Access Control in Elasticsearch
Critical
CVE-2015-1832
Improper Restriction of XML External Entity Reference in Apace Derby
Medium
CVE-2016-5000
Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability
High
CVE-2016-2510
Improper Input Validation in BeanShell
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.