Low
CVE-2015-5318
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2015-5321
Jenkins has Information Disclosure via Sidepanel Widget
High
CVE-2017-3200
GraniteDS Insecure Deserialization
High
CVE-2018-3831
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
High
CVE-2019-1003044
Jenkins Slack Notification Plugin CSRF vulnerability and missing permission checks
Critical
CVE-2015-7501
Deserialization of Untrusted Data in Apache commons collections
Medium
CVE-2017-12610
Improper Authentication in Apache Kafka
Medium
CVE-2019-1003097
Jenkins Crowd Integration Plugin stores credentials in plain text
Medium
CVE-2019-1003096
Jenkins TestFairy Plugin stores credentials in plain text
Critical
CVE-2017-5648
Exposure of Resource to Wrong Sphere in Apache Tomcat
High
CVE-2017-12160
Keycloak Oauth Implementation Error
Medium
CVE-2019-11065
Insecure transport protocol in Gradle
High
CVE-2018-8015
Apache ORC vulnerable to Uncontrolled Recursion
Critical
CVE-2018-18240
Pippo RCE Vulnerability
Critical
CVE-2018-12533
Arbitrary code execution in Richfaces
Medium
CVE-2018-1000419
Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs
High
CVE-2018-1000425
Jenkins SonarQube Scanner Plugin stored server authentication token in plain text
Medium
CVE-2018-1000412
Jenkins Jira Plugin Incorrect Authorization vulnerability
High
CVE-2018-1000423
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
High
CVE-2018-1000424
Jenkins Artifactory Plugin stored old directly entered credentials unencrypted on disk
High
CVE-2018-1000418
Jenkins HipChat Plugin allows credential capture due to incorrect authorization
High
CVE-2018-1000073
RubyGems Link Following vulnerability
Medium
CVE-2017-1000400
Missing Authorization in Jenkins
Critical
Exploited in attacks
CVE-2018-14667
Richfaces vulnerable to arbitrary code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.