Medium
CVE-2019-10447
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2019-10444
Jenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation
High
CVE-2019-10448
Cleartext Storage of Sensitive Information in Jenkins Extensive Testing Plugin
High
CVE-2019-10446
Jenkins Cadence vManager Plugin disables SSL/TLS and hostname verification
Medium
CVE-2019-10445
Missing permission checks in Google Kubernetes Engine Jenkins Plugin
Medium
CVE-2019-10442
Jenkins iceScrum Plugin vulnerable to Missing Authorization
Medium
CVE-2019-10441
Jenkins iceScrum Plugin vulnerable to Cross-site Request Forgery
Medium
CVE-2019-10436
Improper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin
Medium
CVE-2019-10438
Jenkins CRX Content Package Deployer Plugin subject to Missing Authorization
High
CVE-2019-10437
Jenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery
High
CVE-2019-14832
Keycloak Unauthenticated Access
Medium
CVE-2019-14838
Wildfly Authorization Misconfiguration
Medium
CVE-2019-14858
A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to
Medium
CVE-2019-17496
Craft CMS XSS Vulnerability
Medium
CVE-2019-17433
z-song laravel-admin XSS via the Slug or Name on the Roles screen
High
CVE-2019-17109
Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.
High
CVE-2019-15715
MantisBT Remote Code Execution
Critical
CVE-2019-17134
OpenStack Octavia Amphora-Agent not requiring Client-Certificate
Medium
CVE-2019-17106
Centreon Sensitive Data Exposure
High
CVE-2019-17104
Centreon Does Not Set HTTPOnly Flag
High
CVE-2019-14846
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin
Critical
CVE-2018-21025
Centreon Privilege Escalation
Medium
CVE-2019-17205
TeamPass Stored Cross-site Scripting
Medium
CVE-2019-17204
TeamPass Stored Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.