Medium
CVE-2019-1003073
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2019-1003094
Jenkins Open STF Plugin stores credentials in plain text
High
CVE-2018-0114
Cisco node-jose improper validation of JWT signature
Medium
CVE-2017-2611
Incorrect Authorization in Jenkins Core
High
CVE-2013-2115
Code injection in Apache Struts
High
CVE-2017-7615
MantisBT allows arbitrary password reset
High
CVE-2019-1003024
Jenkins Script Security Plugin sandbox bypass vulnerability
Medium
CVE-2019-1003011
Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
Medium
CVE-2019-1003025
Jenkins Cloud Foundry Plugin vulnerable to exposure of sensitive information
High
CVE-2019-1003006
Jenkins Groovy Plugin sandbox bypass vulnerability
High
CVE-2019-1003002
Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability
High
CVE-2019-1003001
Jenkins Groovy Plugin sandbox bypass vulnerability
High
CVE-2019-1003000
Protection Mechanism Failure in Jenkins Script Security Plugin
Low
CVE-2019-1003048
Jenkins PRQA Plugin stored password in plain text
Critical
CVE-2019-1003040
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Medium
CVE-2019-1003039
Jenkins AppDynamics Dashboard Plugin has insufficiently protected credentials
Critical
CVE-2019-1003041
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin
Medium
CVE-2019-1003036
Missing permission check in Azure VM Agents Plugin allowed modifying VM configuration
Medium
CVE-2019-1003047
SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin
Medium
CVE-2019-1003045
ECS Publisher Plugin stored and displayed API token in plain text
Medium
CVE-2019-1003043
Jenkins Slack Notification Plugin missing permission check
Medium
CVE-2019-1003037
Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin
Critical
CVE-2019-1003034
Script security sandbox bypass in Jenkins Job DSL Plugin
Critical
CVE-2019-1003031
Script security sandbox bypass in Matrix Project Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.