Medium
CVE-2017-1000355
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2017-1000356
Cross-Site Request Forgery in Jenkins
High
CVE-2017-1000354
Improper Authentication in Jenkins
High
CVE-2018-1000058
Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin
Medium
CVE-2017-15712
Path Traversal in Apache Oozie
Medium
CVE-2012-3536
Apache James Hupa Webmail application Cross-site Scripting Vulnerabilities
High
CVE-2017-15696
Apache Geode configuration request authorization vulnerability
High
CVE-2017-15693
Apache Geode unsafe deserialization of application objects
Critical
CVE-2017-15692
Apache Geode unsafe deserialization in TcpServer
High
CVE-2013-1768
Deserialization of Untrusted Data in Apache OpenJPA
High
CVE-2016-0793
WildFly has incomplete blacklist vulnerability
Medium
CVE-2018-1000147
Jenkins Perforce Plugin exposure of sensitive information vulnerability exists
Low
CVE-2018-1000150
Jenkins Reverse Proxy Auth Plugin allows attackers with local file system access to obtain a list of authorities for logged in users
Low
CVE-2018-1000143
Jenkins GitHub Pull Request Builder Plugin
Medium
CVE-2018-1000142
Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials
High
CVE-2018-1000153
Jenkins vSphere Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2018-1000176
Jenkins Email Extension Plugin showed plain text SMTP password in configuration form field
Medium
CVE-2018-1000177
Stored XSS vulnerability in Jenkins S3 Publisher Plugin
High
CVE-2015-5209
Special top object can be used to access Struts' internals
Low
CVE-2018-1000186
Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability
Medium
CVE-2018-1000183
Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
Medium
CVE-2018-1000187
Exposure of Sensitive Information in Jenkins Kubernetes Plugin
Medium
CVE-2018-1000196
Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text
Medium
CVE-2018-1000190
Exposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.