Medium
CVE-2019-10314
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Low
CVE-2019-10316
Jenkins Aqua MicroScanner Plugin stored credentials in plain text
High
CVE-2019-10311
Jenkins Ansible Tower Plugin missing permission check
Medium
CVE-2019-10312
Missing permission check in Jenkins Ansible Tower Plugin
Medium
CVE-2019-10310
Jenkins Ansible Tower Plugin cross-site request forgery vulnerability
Medium
CVE-2019-10317
Jenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation
Medium
CVE-2019-10315
Jenkins GitHub Authentication Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2019-10307
Jenkins Static Analysis Utilities Plugin is vulnerable to Cross-site request forgery vulnerability
Medium
CVE-2019-10309
Jenkins Self-Organizing Swarm Plug-in Modules Plugin XXE vulnerability via UDP broadcast response
Medium
CVE-2019-0186
Cross-site Scripting in Apache Pluto Chatroom demo
High
CVE-2019-10248
Eclipse Vorto resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS
High
CVE-2019-11405
OpenAPI Tools OpenAPI Generator uses HTTP in various files
Critical
CVE-2019-10306
Sandbox bypass in ontrack Jenkins Plugin
Medium
CVE-2019-10304
Jenkins XebiaLabs XL Deploy Plugin vulnerable to Cross-site request forgery (CSRF)
Low
CVE-2019-10303
Jenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text
High
CVE-2019-10300
Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2019-10305
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin
High
CVE-2019-10302
Jenkins jira-ext Plugin stores credentials unencrypted
High
CVE-2019-10301
Jenkins GitLab Plugin missing permission checks
Medium
CVE-2022-29161
Use of a Broken or Risky Cryptographic Algorithm in XWiki Crypto API
Critical
CVE-2022-29599
Command injection in Apache Maven maven-shared-utils
High
CVE-2022-29002
Cross-Site Request Forgery in XXL-Job
High
CVE-2022-31268
Path traversal in Gitblit
Critical
CVE-2022-31267
Unescaped control characters in Gitblit
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.