High
CVE-2021-30638
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
High
CVE-2021-21655
Cross-Site Request Forgery in Jenkins P4 Plugin
High
CVE-2021-21656
XML external entity (XXE) attacks in Jenkins Xcode integration Plugin
High
CVE-2021-20202
Temporary Directory Hijacking Vulnerability in Keycloak
Critical
CVE-2021-23901
XML external entity (XXE) injection in Apache Nutch
Medium
CVE-2021-22114
Path Traversal in Spring-integration-zip
Low
CVE-2022-27195
Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin
Medium
CVE-2022-27196
Stored Cross-site Scripting vulnerability in Jenkins Favorite Plugin
Medium
CVE-2022-27197
Stored Cross-site Scripting vulnerability in Jenkins Dashboard View Plugin
High
CVE-2022-27201
Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin
Medium
CVE-2022-27199
Missing permission checks in AWS Credentials Plugin
Medium
CVE-2022-27204
CSRF vulnerability and missing permission checks in Jenkins Extended Choice Parameter Plugin allow SSRF
High
CVE-2022-27198
CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin
Medium
CVE-2022-27203
Arbitrary JSON and property file read vulnerability in Jenkins Extended Choice Parameter Plugin
High
CVE-2022-27202
Stored Cross-site Scripting vulnerability in Jenkins Extended Choice Parameter Plugin
Medium
CVE-2022-27212
Stored Cross-site Scripting vulnerability in Jenkins List Git Branches Parameter Plugin
Medium
CVE-2022-27207
Stored Cross-site Scripting vulnerability in Jenkins global-build-stats Plugin
Medium
CVE-2022-27216
Passwords stored in plain text by Jenkins dbCharts Plugin
Medium
CVE-2022-27217
Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin
Medium
CVE-2022-27214
CSRF vulnerability in Jenkins Release Helper Plugin
High
CVE-2022-27210
CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials
Medium
CVE-2022-27209
Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs
Low
CVE-2022-27206
Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
Medium
CVE-2022-27205
CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.