Medium
CVE-2019-16559
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2019-16562
Jenkins buildgraph-view Plugin vulnerable to stored Cross-site Scripting
High
CVE-2019-16558
Improper Certificate Validation in Jenkins Spira Importer Plugin
Medium
CVE-2019-16552
Missing permission check in Jenkins Gerrit Trigger Plugin
High
CVE-2019-16551
Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin
High
CVE-2019-16550
Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin
High
CVE-2019-16549
Jenkins Maven Release Plug-in Plugin XXE vulnerability
High
CVE-2019-16553
Cross-Site Request Forgery in Jenkins Build Failure Analyzer Plugin
Critical
CVE-2019-14910
Keycloak Authentication Error
High
CVE-2019-14909
Keycloak Authentication Error
High
CVE-2019-10174
Use of Externally-Controlled Input to Select Classes or Code in Infinispan
Low
CVE-2019-16543
Plaintext Storage in Jenkins Spira Importer Plugin
Low
CVE-2019-16545
Jenkins QMetry for JIRA Plugin shows plain text password in configuration form
High
CVE-2019-16540
Jenkins Support Core Plugin allowed users with Overall/Read permission to delete arbitrary files
Medium
CVE-2019-16548
Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2019-16544
Jenkins QMetry for JIRA Plugin stored credentials in plain text
Medium
CVE-2019-16547
Jenkins Google Compute Engine Plugin Missing Authorization vulnerability
Medium
CVE-2019-16546
Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin
Medium
CVE-2019-16539
Missing permission check in Jenkins Support Core Plugin
Medium
CVE-2019-16541
Jenkins JIRA Plugin allows users to select and use credentials with System scope
High
CVE-2019-16538
Incorrect Authorization in Jenkins Script Security Plugin
Medium
CVE-2019-16542
Jenkins Anchore Container Scanner Plugin vulnerable to Insufficiently Protected Credentials
Medium
CVE-2019-7619
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
High
CVE-2019-0205
Loop with Unreachable Exit Condition in Apache Thrift
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.