Low
CVE-2019-10299
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Low
CVE-2019-10297
Jenkins Sametime Plugin stores credentials in plain text
Low
CVE-2019-10291
Jenkins Netsparker Enterprise Scan Plugin stored credentials in plain text
Low
CVE-2019-10298
Jenkins Koji Plugin stores credentials in plain text
Low
CVE-2019-10281
Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text
Medium
CVE-2019-10282
Jenkins Klaros-Testmanagement Plugin stores credentials in plain text
Low
CVE-2019-10296
Jenkins Serena SRA Deploy Plugin stores credentials in plain text
Medium
CVE-2019-10295
Jenkins crittercism-dsym Plugin stores API key in plain text
High
CVE-2019-10277
Jenkins StarTeam Plugin stores credentials in plain text
High
CVE-2019-10294
Jenkins Kmap Plugin stores credentials in plain text
High
CVE-2019-10280
Jenkins Assembla Auth Plugin stores credentials in plain text
High
CVE-2016-6816
Improper Input Validation in Apache Tomcat
Critical
Exploited in attacks
CVE-2013-2251
Code injection in Apache Struts
Critical
Exploited in attacks
CVE-2019-1003030
Sandbox bypass in Jenkins Pipeline: Groovy Plugin
High
CVE-2019-7611
Improper Access Control in Elasticsearch
Medium
CVE-2016-5000
Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability
High
CVE-2017-5662
Improper Restriction of XML External Entity Reference in Apache Batik
Medium
CVE-2017-2599
Incorrect Authorization in Jenkins
Medium
CVE-2018-14642
Exposure of Sensitive Information to an Unauthorized Actor in Undertow
Medium
CVE-2013-7398
Insufficient Verification of Data Authenticity in Async Http Client
Medium
CVE-2013-4444
Apache Tomcat Unrestricted file upload vulnerability
High
CVE-2016-4978
Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain
Medium
CVE-2016-2402
Improper Certificate Validation in OkHttp
Low
CVE-2017-15709
ActiveMQ's OpenWire protocol exposes certain system details as plain text
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.