Medium
CVE-2020-2187
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2020-2183
Improper permission checks in Jenkins Copy Artifact Plugin
Low
CVE-2020-2182
Improper masking of some secrets in Jenkins Credentials Binding Plugin
Medium
CVE-2020-2185
Missing SSH host key validation in Jenkins Amazon EC2 Plugin
Low
CVE-2020-2186
CSRF vulnerability in Amazon EC2 Plugin
High
CVE-2020-2189
RCE vulnerability in SCM Filter Jervis Plugin
Medium
CVE-2020-2181
Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
Medium
CVE-2020-2184
CSRF vulnerability in Jenkins CVS Plugin
Medium
CVE-2020-2188
Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin
Medium
CVE-2020-10686
Keycloak users may be able to remove MFA from other users' devices
Critical
CVE-2020-7645
chrome-launcher subject to OS Command Injection
Critical
Exploited in attacks
CVE-2020-11651
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access
High
CVE-2020-12479
TeamPass PHP arbitrary file include vulnerability
High
CVE-2020-12478
TeamPass files are available without authentication
High
Exploited in attacks
CVE-2020-11652
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods a
Medium
CVE-2020-12469
Subrion CMS PHP Object Injection
High
CVE-2020-12468
Subrion CMS CSV injection via Export Language
High
CVE-2020-1745
Improper Authorization in Undertoe
High
CVE-2020-1757
Improper Input Validation in Undertow
Medium
CVE-2020-11883
Diavante vue-storefront-api and storefront-api disclose stack trace
High
CVE-2020-2180
RCE vulnerability in Jenkins AWS SAM Plugin
Medium
CVE-2020-2177
Credentials stored in plain text by Jenkins Copr Plugin
High
CVE-2020-2178
XXE vulnerability in Jenkins Parasoft Findings Plugin
High
CVE-2020-2179
RCE vulnerability in Jenkins Yaml Axis Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.