Critical
CVE-2019-10418
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2019-10414
Jenkins Git Changelog Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-10415
Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-10416
Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-10422
Jenkins Call Remote Job Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-10421
Jenkins Azure Event Grid Build Notifier Plugin has Insufficiently Protected Credentials
Low
CVE-2019-10420
Jenkins Assembla Plugin has Insufficiently Protected Credentials
Low
CVE-2019-10419
Jenkins vFabric Application Director Plugin Insufficiently Protected Credentials
Low
CVE-2019-10411
Jenkins Inedo BuildMaster Plugin showed plain text password in configuration form
Medium
CVE-2019-10409
Missing permission check in Jenkins Project Inheritance Plugin
Low
CVE-2019-10412
Jenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive Information
Medium
CVE-2019-10413
Jenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-10410
Jenkins Log Parser Plugin vulnerable to Cross-site Scripting
Medium
CVE-2019-10408
Jenkins Project Inheritance Plugin vulnerable to Cross-Site Request Forgery
High
CVE-2018-8074
Yii Framework Code Injection
Medium
CVE-2019-16725
Joomla! XSS in Default Templates
High
CVE-2019-10754
Use of Insufficiently Random Values in Apereo CAS
Medium
CVE-2019-12407
Cross-site Scripting in Apache JSPWiki
High
CVE-2018-21019
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Medium
CVE-2019-16669
Pagekit User enumeration
Low
CVE-2019-16370
Use of a weak cryptographic algorithm in Gradle
High
CVE-2019-16317
Pimcore RCE via PHAR upload
High
CVE-2019-16318
Pimcore Unrestricted Upload of File with Dangerous Type
Medium
CVE-2019-10399
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.