Medium
CVE-2017-1000221
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2017-1000107
Sandbox bypass in Jenkins Script Security Plugin sandbox bypass
High
CVE-2017-1000106
Improper Authentication in Jenkins Blue Ocean Plugin
Medium
CVE-2017-1000104
Improper Privilege Management in Jenkins Config File Provider Plugin
Medium
CVE-2017-1000084
Parameterized Trigger Plugin fails to check Item/Build permission
Medium
CVE-2017-1000110
Improper Authentication in Jenkins Blue Ocean Plugin
Critical
CVE-2017-1000116
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.
High
CVE-2017-1000096
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
Medium
CVE-2017-1000095
Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin
Medium
CVE-2017-1000089
Jenkins Build Step Plugin fails to check Item/Build permission
High
CVE-2017-1000046
Sensitive Cookie Without HttpOnly and Secure Flag
Medium
CVE-2017-0360
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerabili
Critical
CVE-2018-7251
Anchor CMS Logs Credentials
Medium
CVE-2018-7274
Yab Quarx persistent cross-site scripting vulnerability
Low
CVE-2011-1483
JBossWS vulnerable to uncontrolled recursion
High
CVE-2016-0750
Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
High
CVE-2016-9589
Red Hat Wildfly DoS
Medium
CVE-2017-1002152
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.
Medium
CVE-2017-12158
Keycloak Reflected XSS
High
CVE-2017-12159
Keycloak CSRF Vulnerability
High
CVE-2017-12165
Undertow Request Smuggling vulnerability
Medium
CVE-2017-12197
Improper Input Validation in libpam4j
Medium
CVE-2017-12196
Incorrect Authorization in Undertow
Medium
CVE-2017-2602
Incomplete List of Disallowed Inputs in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.