Medium
CVE-2019-10459
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2019-10469
Jenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization
Medium
CVE-2019-10449
Jenkins Fortify on Demand Plugin stores credentials in plain text
Medium
CVE-2019-10452
Jenkins View26 Test-Reporting Plugin stores access token in plain text
Medium
CVE-2019-10451
Jenkins SOASTA CloudTest Plugin stores API token in plain text
Medium
CVE-2019-10447
Jenkins Sofy.AI Plugin stores API token in plain text
Medium
CVE-2019-10445
Missing permission checks in Google Kubernetes Engine Jenkins Plugin
Medium
CVE-2019-10436
Improper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin
Medium
CVE-2019-10438
Jenkins CRX Content Package Deployer Plugin subject to Missing Authorization
High
CVE-2019-10437
Jenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery
Low
CVE-2019-10434
Jenkins LDAP Email Plugin shows plain text password in configuration form
Low
CVE-2019-10433
DingTalk Plugin stores credentials in plain text
High
CVE-2019-10435
Jenkins SourceGear Vault plugin transmits credentials in plain text
High
CVE-2019-0231
Cleartext Transmission of Sensitive Information in Apache MINA
Medium
CVE-2019-10414
Jenkins Git Changelog Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-10415
Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-10416
Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Low
CVE-2019-10411
Jenkins Inedo BuildMaster Plugin showed plain text password in configuration form
Low
CVE-2019-10412
Jenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive Information
Medium
CVE-2019-10413
Jenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-12407
Cross-site Scripting in Apache JSPWiki
Low
CVE-2019-10397
Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields
High
CVE-2019-15630
Mule modules contain Directory Traversal
Medium
CVE-2019-10383
Improper Neutralization of Input During Web Page Generation in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.