Medium
CVE-2019-10457
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2019-10449
Jenkins Fortify on Demand Plugin stores credentials in plain text
Medium
CVE-2019-10454
Jenkins Rundeck Plugin CSRF vulnerability
Medium
CVE-2019-10452
Jenkins View26 Test-Reporting Plugin stores access token in plain text
Medium
CVE-2019-10456
Jenkins Oracle Cloud Infrastructure Compute Classic Plugin cross-site request forgery vulnerability
Medium
CVE-2019-10451
Jenkins SOASTA CloudTest Plugin stores API token in plain text
Medium
CVE-2019-10455
Missing permission check in Jenkins Rundeck Plugin
High
CVE-2019-10453
Jenkins Delphix Plugin vulnerable to Cleartext credential storage
Low
CVE-2019-10450
Cleartext Storage of Sensitive Information in Jenkins ElasticBox CI Plugin
Medium
CVE-2019-10439
Jenkins CRX Content Package Deployer Plugin subject to credentials enumeration via Missing Authorization
High
CVE-2019-10440
Jenkins NeoLoad Plugin stores credentials in cleartext
High
CVE-2019-10443
Jenkins iceScrum Plugin stores credentials in Cleartext
Medium
CVE-2019-10447
Jenkins Sofy.AI Plugin stores API token in plain text
Medium
CVE-2019-10444
Jenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation
High
CVE-2019-10448
Cleartext Storage of Sensitive Information in Jenkins Extensive Testing Plugin
High
CVE-2019-10446
Jenkins Cadence vManager Plugin disables SSL/TLS and hostname verification
Medium
CVE-2019-10445
Missing permission checks in Google Kubernetes Engine Jenkins Plugin
Medium
CVE-2019-10442
Jenkins iceScrum Plugin vulnerable to Missing Authorization
Medium
CVE-2019-10441
Jenkins iceScrum Plugin vulnerable to Cross-site Request Forgery
Medium
CVE-2019-10436
Improper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin
Medium
CVE-2019-10438
Jenkins CRX Content Package Deployer Plugin subject to Missing Authorization
High
CVE-2019-10437
Jenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery
High
CVE-2019-14832
Keycloak Unauthenticated Access
Medium
CVE-2019-14838
Wildfly Authorization Misconfiguration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.