Low
CVE-2017-1000401
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2017-1000395
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Medium
CVE-2017-1000398
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Medium
CVE-2017-1000396
Improper Certificate Validation in Jenkins
Medium
CVE-2018-1000997
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
High
CVE-2017-1000394
Improper Input Validation in Jenkins
High
CVE-2017-1000391
Improper Input Validation in Jenkins
Medium
CVE-2017-1000392
Improper Neutralization of Input During Web Page Generation in Jenkins
High
CVE-2017-1000393
OS Command Injection in Jenkins
High
CVE-2016-3110
mod_cluster Denial of Service vulnerability
High
CVE-2018-1000074
RubyGems Deserialization of Untrusted Data vulnerability
Critical
CVE-2018-1000076
RubyGems Improper Verification of Cryptographic Signature vulnerability
Medium
CVE-2018-1000078
RubyGems Cross-site Scripting vulnerability
Medium
CVE-2018-1000077
RubyGems Improper Input Validation vulnerability
Critical
CVE-2016-9299
Improper Neutralization of Special Elements used in an LDAP Query in Jenkins
High
CVE-2017-15089
Deserialization of Untrusted Data in Infinispan
High
CVE-2017-7675
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Medium
CVE-2017-1000113
Jenkins Deploy to container Plugin stored plain text passwords in job configuration
Medium
CVE-2017-15691
Improper Restriction of XML External Entity Reference in Apache uimaj
High
CVE-2015-0226
Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J
Medium
CVE-2018-1000169
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
High
Exploited in attacks
CVE-2016-3081
Apache Struts RCE Vulnerability
Critical
CVE-2018-8016
Missing Authentication for Critical Function in Apache Cassandra
High
CVE-2018-3258
Improper Privilege Management in MySQL Connectors Java
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.