Medium
CVE-2021-29049
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
CVE-2021-21662
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs
High
CVE-2021-20088
mootools-more vulnerable to prototype pollution
High
CVE-2020-1695
Improper Input Validation in RESTEasy
Critical
CVE-2014-4678
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability ex
Medium
CVE-2019-20366
XSS in Ignite Realtime Openfire via isTrustStore
Critical
CVE-2019-19899
Pebble Templates Improper Input Validation vulnerability
High
CVE-2019-19729
bson-objectid contains Improper input validation
Medium
CVE-2014-3599
HornetQ REST vulnerable to Improper Restriction of XML External Entity Reference
High
CVE-2019-17598
Play Framework Inadequate Encryption Strength vulnerability
Critical
CVE-2019-8149
Magento Broken authentication and session managememt
High
CVE-2019-8154
Magento remote code execution vulnerability
High
CVE-2019-17221
PhantomJS Arbitrary File Read
Medium
CVE-2019-16904
TeamPass Cross-site Scripting (XSS) vulnerability
Medium
CVE-2019-10430
Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text
Medium
CVE-2019-10426
Jenkins Gem Publisher Plugin stores credentials as plaintext
High
CVE-2019-10428
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form
Medium
CVE-2019-10407
Project Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin
Medium
CVE-2019-10427
Jenkins Aqua MicroScanner Plugin showed plain text credential in configuration form
Medium
CVE-2019-10429
Jenkins GitLab Logo Plugin stores credentials unencrypted
Medium
CVE-2019-10406
Improper Neutralization of Input During Web Page Generation in Jenkins
Medium
CVE-2019-10405
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Medium
CVE-2019-10404
Improper Neutralization of Input During Web Page Generation in Jenkins
Medium
CVE-2019-10402
Improper Neutralization of Input During Web Page Generation in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.