Medium
CVE-2020-2118
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 191
Reset filters
High
CVE-2020-2117
Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials
High
CVE-2020-2116
CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials
Medium
CVE-2019-16574
Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins
Medium
CVE-2019-16564
Jenkins Pipeline Aggregator View Plugin stored XSS vulnerability
High
CVE-2019-16573
Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgery
Critical
CVE-2019-10458
Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin
Critical
CVE-2019-10417
Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin
Critical
CVE-2019-10418
Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin
High
CVE-2019-10380
Jenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerability
Medium
CVE-2019-10373
Jenkins Build Pipeline Plugin vulnerable to Cross-site Scripting
Medium
CVE-2019-10357
Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin
Medium
CVE-2022-30952
Insufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin
Low
CVE-2022-30949
Path traversal in Jenkins REPO Plugin
Medium
CVE-2022-30951
Missing Authorization in Jenkins WMI Windows Agents plugin
High
CVE-2022-30947
Path traversal in Jenkins Git Mercurial and Repo Plugins
Medium
CVE-2022-30950
Buffer overflow in Jenkins WMI Windows Agents plugin
Low
CVE-2022-30948
Path traversal in Jenkins Mercurial Plugin
High
CVE-2022-30945
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin
Medium
CVE-2011-1475
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
High
CVE-2017-1000108
Jenkins Pipeline: Input Step Plugin
Medium
CVE-2017-1000404
Jenkins Delivery Pipeline Plugin Cross-site Scripting vulnerability
High
CVE-2018-1000058
Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin
High
CVE-2018-17605
Asset Pipeline plugin for Grails vulnerable to Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.