Medium
CVE-2021-21634
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2021-21638
CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials
Medium
CVE-2021-21637
Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials
Medium
CVE-2021-21632
Missing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentials
High
CVE-2021-21633
CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials
Medium
CVE-2021-21630
Stored XSS vulnerability in Jenkins Extra Columns Plugin
High
CVE-2021-21627
CSRF vulnerability in Jenkins Libvirt Agents Plugin
Medium
CVE-2021-21625
Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs
High
CVE-2021-20218
Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client
Low
CVE-2021-21621
Support bundles can include user session IDs in Jenkins Support Core Plugin
Medium
CVE-2021-21619
XSS vulnerability in Jenkins Claim Plugin
High
CVE-2021-0341
Square OkHttp can accept the wrong certificate
Medium
CVE-2020-7021
Insertion of Sensitive Information into Log File in Elasticsearch
Medium
CVE-2020-29582
Incorrect Default Permissions in JetBrains Kotlin
Medium
CVE-2021-21615
Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins
Medium
CVE-2021-21607
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Medium
CVE-2021-21612
Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin
Medium
CVE-2021-21611
Stored XSS vulnerability in Jenkins on new item page
High
CVE-2021-21605
Path traversal vulnerability in Jenkins agent names
Medium
CVE-2021-21614
Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin
Medium
CVE-2021-21610
Reflected XSS vulnerability in Jenkins markup formatter preview
Medium
CVE-2021-21609
Missing permission check for paths with specific prefix in Jenkins
High
CVE-2021-21604
Improper handling of REST API XML deserialization errors in Jenkins
Medium
CVE-2021-21608
Stored XSS vulnerability in Jenkins button labels
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.