Medium
CVE-2021-20717
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Unrated
pysec-2022-199
The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project which contained runtime code which collected the content of os.environ.items() when inst
Medium
CVE-2020-13662
Drupal Core Open Redirect vulnerability
Medium
CVE-2021-21645
Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs
High
CVE-2021-21642
XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin
Medium
CVE-2021-21643
Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs
Medium
CVE-2021-21647
Missing permission check in Jenkins CloudBees CD Plugin allows scheduling builds
High
CVE-2021-21646
Remote code execution vulnerability in Jenkins Templating Engine Plugin
Medium
CVE-2021-21644
CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files
Medium
CVE-2020-28124
Cross Site Scripting (XSS) in LavaLite 5.8.0
High
CVE-2021-28458
Improper Privilege Management in Azure ms-rest-nodeauth
Medium
CVE-2021-30458
Wikimedia Parsoid vulnerable to Cross-site Scripting (XSS)
Medium
CVE-2021-22513
Missing permission checks in Micro Focus Application Automation Tools Plugin
High
CVE-2021-22510
Reflected XSS vulnerability in Jenkins Micro Focus Application Automation Tools Plugin
Medium
CVE-2021-22511
SSL/TLS certificate validation unconditionally disabled by Jenkins Micro Focus Application Automation Tools Plugin
Medium
CVE-2021-22512
CSRF vulnerability in Jenkins Micro Focus Application Automation Tools Plugin
Medium
CVE-2020-23761
subrion CMS Cross Site Scripting (XSS) vulnerability
Medium
CVE-2021-21641
CSRF vulnerability in Jenkins promoted builds Plugin
Medium
CVE-2021-21640
View name validation bypass in Jenkins
Medium
CVE-2021-21639
Lack of type validation in agent related REST API in Jenkins
Medium
CVE-2021-30074
Docsify vulnerable to cross-site scripting due to mishandled encoding
Medium
CVE-2021-21634
Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin
High
CVE-2021-21638
CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials
Medium
CVE-2021-21636
Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.