Low
CVE-2020-24404
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2020-23136
Microweber Insufficient Session Expiry
High
CVE-2019-7357
Subrion CMS CSRF Vulnerability
Critical
Exploited in attacks
CVE-2020-16846
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
Critical
CVE-2020-25592
In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.
Medium
CVE-2020-17490
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.
Medium
CVE-2020-2317
Stored XSS vulnerability in Jenkins FindBugs Plugin
Low
CVE-2020-2319
Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin
Medium
CVE-2020-2318
Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin
Medium
CVE-2020-2316
Stored XSS vulnerability in Jenkins Static Analysis Utilities Plugin
Medium
CVE-2020-2315
XXE vulnerability in Jenkins Visualworks Store Plugin
Medium
CVE-2020-2309
Missing authorization in Jenkins Kubernetes Plugin
Medium
CVE-2020-2311
Missing permission check in Jenkins AWS Global Configuration Plugin allows replacing plugin configuration
Medium
CVE-2020-2308
Missing Authorization in Jenkins Kubernetes Plugin
Medium
CVE-2020-2310
Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs
Medium
CVE-2020-2312
Password written to the build log by Jenkins SQLPlus Script Runner Plugin
Medium
CVE-2020-2313
Missing permission checks in Jenkins Azure Key Vault Plugin allow enumerating credentials IDs
Low
CVE-2020-2314
Password stored in plain text by Jenkins AppSpider Plugin
Medium
CVE-2020-2304
XXE vulnerability in Jenkins Subversion Plugin
Critical
CVE-2020-2301
Authentication cache in Active Directory Jenkins Plugin allows logging in with any password
Medium
CVE-2020-2302
Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page
Medium
CVE-2020-2303
CSRF vulnerability in Jenkins Active Directory Plugin
Medium
CVE-2020-2305
XXE vulnerability in Jenkins Mercurial Plugin
Critical
CVE-2020-2299
Improper Authentication in Jenkins Active Directory Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.