Critical
CVE-2021-21692
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 547
Reset filters
Critical
CVE-2021-21693
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21694
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21688
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21691
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21687
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Critical
CVE-2021-21695
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
High
CVE-2021-22044
Exposure of Resource to Wrong Sphere in Spring Cloud OpenFeign
High
CVE-2021-21678
Jenkins SAML Plugin allows bypassing CSRF protection for any URL
High
CVE-2021-21679
Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL
Medium
CVE-2021-21681
Password stored in plain text by Jenkins Nomad Plugin
Medium
CVE-2021-21660
XSS vulnerability in Jenkins Markdown Formatter Plugin
Medium
CVE-2021-21607
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Medium
CVE-2021-21612
Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin
High
CVE-2021-21605
Path traversal vulnerability in Jenkins agent names
Critical
CVE-2020-2299
Improper Authentication in Jenkins Active Directory Plugin
Medium
CVE-2020-2294
Missing permission checks in Jenkins Maven Cascade Release Plugin
Medium
CVE-2020-2295
CSRF vulnerability in Jenkins Maven Cascade Release Plugin
Medium
CVE-2020-2252
Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin
Medium
CVE-2020-2253
Missing hostname validation in Email Extension Plugin
Medium
CVE-2020-2231
Improper Neutralization of Input During Web Page Generation in Jenkins
High
CVE-2020-2196
Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection
Low
CVE-2020-2182
Improper masking of some secrets in Jenkins Credentials Binding Plugin
High
CVE-2019-17561
Improper Verification of Cryptographic Signature in Apache Netbeans
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.