Low
CVE-2018-1000104
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2018-1000109
Jenkins Google Play Android Publisher Plugin allows attacker to obtain credential IDs
Medium
CVE-2018-1000110
Incorrect Authorization in Jenkins Git Plugin
High
CVE-2017-7687
Denial of service in Apache Mesos
High
CVE-2017-7680
Apache OpenMeetings allows flash content to be loaded from untrusted domains
High
CVE-2017-5650
Improper Resource Shutdown or Release in Apache Tomcat
High
CVE-2017-3523
Improper Access Control in MySQL Connectors Java
High
CVE-2017-1000387
Jenkins Build-Publisher plugin has Insufficiently Protected Credentials
High
CVE-2017-1000361
OpenDaylight Controller DoS
Critical
CVE-2017-1000245
Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext
High
CVE-2017-1000106
Improper Authentication in Jenkins Blue Ocean Plugin
Medium
CVE-2017-1000084
Parameterized Trigger Plugin fails to check Item/Build permission
Medium
CVE-2017-1000110
Improper Authentication in Jenkins Blue Ocean Plugin
High
CVE-2017-1000096
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
Medium
CVE-2017-1000089
Jenkins Build Step Plugin fails to check Item/Build permission
Low
CVE-2011-1483
JBossWS vulnerable to uncontrolled recursion
High
CVE-2016-0750
Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
Medium
CVE-2017-12158
Keycloak Reflected XSS
High
CVE-2017-12159
Keycloak CSRF Vulnerability
Medium
CVE-2017-2602
Incomplete List of Disallowed Inputs in Jenkins
Medium
CVE-2017-2598
Inadequate Encryption Strength in Jenkins
Medium
CVE-2017-2600
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Medium
CVE-2017-2612
Incorrect Permission Assignment for Critical Resource in Jenkins
Medium
CVE-2017-2606
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.