High
CVE-2017-5647
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 191
Reset filters
High
CVE-2018-1000866
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
High
CVE-2018-1000817
Asset Pipeline Grails Plugin vulnerable to Path Traversal
High
CVE-2018-1000401
Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials
Medium
CVE-2018-1000057
Jenkins Credentials Binding Plugin has Insufficiently Protected Credentials
High
CVE-2017-1000106
Improper Authentication in Jenkins Blue Ocean Plugin
Medium
CVE-2017-1000110
Improper Authentication in Jenkins Blue Ocean Plugin
High
CVE-2017-1000096
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
Medium
CVE-2017-1000089
Jenkins Build Step Plugin fails to check Item/Build permission
Medium
CVE-2017-2602
Incomplete List of Disallowed Inputs in Jenkins
High
CVE-2017-2650
Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass
Critical
CVE-2018-18240
Pippo RCE Vulnerability
Medium
CVE-2018-1000015
Incorrect permission checks in Pipeline: Nodes and Processes plugin
High
CVE-2019-1003024
Jenkins Script Security Plugin sandbox bypass vulnerability
High
CVE-2019-1003002
Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability
High
CVE-2019-1003001
Jenkins Groovy Plugin sandbox bypass vulnerability
Critical
CVE-2019-1003041
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin
Critical
Exploited in attacks
CVE-2019-1003030
Sandbox bypass in Jenkins Pipeline: Groovy Plugin
High
CVE-2022-29047
Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
High
CVE-2022-28155
XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin
Medium
CVE-2022-28156
Path traversal in Jenkins Phoenix AutoTest Plugin
Medium
CVE-2022-28157
Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin
Medium
CVE-2022-28158
Missing permission Jenkins Pipeline Phoenix AutoTest Plugin
High
CVE-2022-25173
Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.