High
CVE-2020-2244
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2020-2251
Passwords transmitted in plain text by Jenkins ReadyAPI Functional Testing Plugin
Low
CVE-2020-2249
Credentials stored in plain text by Jenkins tfs Plugin
Low
CVE-2020-2239
Secret stored in plain text by Jenkins Parameterized Remote Trigger Plugin
High
CVE-2020-15777
Maven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted Data
Medium
CVE-2020-7019
Improper privilege management in elasticsearch
High
CVE-2020-2235
CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
Medium
CVE-2020-2237
CSRF vulnerability in Jenkins Flaky Test Handler Plugin
High
CVE-2020-2230
Jenkins Cross-site Scripting vulnerability in project naming strategy
Medium
CVE-2020-2231
Improper Neutralization of Input During Web Page Generation in Jenkins
Low
CVE-2020-2232
Jenkins Email Extension Plugin SMTP password transmitted and displayed in plain text
High
CVE-2020-2234
Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
High
CVE-2020-2229
Jenkins Cross-Site Scripting vulnerability in help icons
Medium
CVE-2020-14297
Wildfly EJB Client causes DoS
High
CVE-2020-15841
Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection
High
CVE-2020-2222
Stored XSS vulnerability in Jenkins 'keep forever' badge icon
High
CVE-2020-2228
Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
High
CVE-2020-2221
Stored XSS vulnerability in Jenkins upstream cause
High
CVE-2020-2220
Stored XSS vulnerability in Jenkins job build time trend
High
CVE-2020-2223
Stored XSS vulnerability in Jenkins console links
Medium
CVE-2020-2219
Stored XSS vulnerability in Jenkins Link Column Plugin
Low
CVE-2020-2218
Password stored in plain text by Jenkins HP ALM Quality Center Plugin
Medium
CVE-2020-2214
Content-Security-Policy protection for user content disabled by Jenkins ZAP Pipeline Plugin
Medium
CVE-2020-2208
Secret stored in plain text by Jenkins Slack Upload Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.