Medium
CVE-2019-1003091
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2019-1003081
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Medium
CVE-2019-1003087
Missing permission check in Jenkins sinatra-chef-builder Plugin
Medium
CVE-2019-1003093
Jenkins Nomad Plugin missing permission check
Medium
CVE-2019-1003097
Jenkins Crowd Integration Plugin stores credentials in plain text
Medium
CVE-2019-1003099
Jenkins openid Plugin missing permission check
Medium
CVE-2019-1003085
Jenkins Zephyr Enterprise Test Management Plugin missing permission check
Medium
CVE-2019-1003096
Jenkins TestFairy Plugin stores credentials in plain text
Critical
CVE-2017-5648
Exposure of Resource to Wrong Sphere in Apache Tomcat
Medium
CVE-2011-1571
Liferay Portal vulnerable to arbitrary command injection
Critical
CVE-2013-4366
Hostname verification in Apache HttpClient 4.3 was disabled by default
Medium
CVE-2011-4367
Apache MyFaces Vulnerable to Path Traversal
High
CVE-2016-5388
Improper Access Control in Apache Tomcat
High
CVE-2017-12160
Keycloak Oauth Implementation Error
High
CVE-2019-6986
Command Injection in VIVO Vitro
Medium
CVE-2019-11065
Insecure transport protocol in Gradle
High
CVE-2018-8015
Apache ORC vulnerable to Uncontrolled Recursion
Critical
CVE-2018-18240
Pippo RCE Vulnerability
Critical
CVE-2018-12533
Arbitrary code execution in Richfaces
Critical
CVE-2018-12532
RichFaces vulnerable to Expression Language Injection
Medium
CVE-2018-1000419
Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs
High
CVE-2018-1000425
Jenkins SonarQube Scanner Plugin stored server authentication token in plain text
Medium
CVE-2018-1000412
Jenkins Jira Plugin Incorrect Authorization vulnerability
High
CVE-2018-1000423
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.