Medium
CVE-2018-1000078
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Critical
CVE-2016-9299
Improper Neutralization of Special Elements used in an LDAP Query in Jenkins
Critical
CVE-2016-6795
Path Traversal in Apache Struts
Critical
CVE-2018-1287
Missing certificate validation in Apache JMeter
High
CVE-2018-11047
Cloud Foundry UAA accepts refresh token as access token on admin endpoints
Medium
CVE-2018-1000152
Jenkins vSphere Plugin incorrect authorization vulnerability
Critical
CVE-2018-1000134
Weak Password Requirements in UnboundID LDAP SDK
Medium
CVE-2018-1000105
Incorrect Authorization in Jenkins Gerrit Trigger Plugin
Medium
CVE-2018-1000106
Incorrect Authorization in Jenkins Gerrit Trigger Plugin
High
CVE-2017-7684
Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption
High
CVE-2017-7561
Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP
High
CVE-2017-5664
Improper Handling of Exceptional Conditions in Apache Tomcat
Critical
CVE-2017-1000245
Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext
Medium
CVE-2017-1000110
Improper Authentication in Jenkins Blue Ocean Plugin
Medium
CVE-2017-12158
Keycloak Reflected XSS
Medium
CVE-2017-12196
Incorrect Authorization in Undertow
High
CVE-2017-2649
Jenkins Active Directory Plugin did not verify certificate of AD server
Medium
CVE-2017-2638
Infinispan Rest API Does Not Enforce Auth Constraints
High
CVE-2017-3203
Deserialization of Untrusted Data in Spring-flex
Medium
CVE-2017-7545
XML External Entity Reference in jbpmmigration
High
CVE-2017-7556
Cross-Site Request Forgery in hawtio
High
CVE-2018-15761
Cloud Foundry UAA Privilege Escalation
High
CVE-2018-1131
Deserialization of Untrusted Data in Infinispan
High
CVE-2019-1003009
Jenkins Active Directory Plugin Improper certificate validation with StartTLS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.