High
CVE-2019-1052
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
Critical
CVE-2019-10328
Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin
High
CVE-2019-10327
XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
High
CVE-2019-10329
Plaintext password storage in Jenkins InfluxDB Plugin
High
CVE-2019-10330
Improper handling of untrusted branches in Gitea Jenkins Plugin
Medium
CVE-2019-10324
Cross-site request forgery vulnerability in Jenkins Artifactory Plugin
Medium
CVE-2019-10325
Jenkins Warnings NG Plugin Cross-site scripting vulnerability
Medium
CVE-2019-10326
Jenkins Warnings NG Plugin cross-site request forgery vulnerability
Medium
CVE-2019-10323
Jenkins Artifactory Plugin missing permission check
Medium
CVE-2019-10322
Jenkins Artifactory Plugin missing permission check
Medium
CVE-2019-10321
Jenkins Artifactory Plugin cross-site request forgery vulnerability
High
CVE-2019-11832
TYPO3 Image Processing susceptible to Code Execution
Low
CVE-2019-11818
Alkacon OpenCMS XSS via New User module
Medium
CVE-2022-29172
Cross-site Scripting in Auth0 Lock
Medium
CVE-2021-20842
EC-CUBE Cross-site request forgery (CSRF) vulnerability
High
CVE-2021-43559
Moodle contains CSRF vulnerability
High
CVE-2021-44144
Croatia Control Asterix 2.8.1 (python_v0.7.2) has a heap-based buffer over-read, with additional details to be disclosed at a later date.
Medium
CVE-2021-43560
Moodle Insecure direct object reference (IDOR) in a calendar web service
High
CVE-2021-42250
Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.
Medium
CVE-2021-43576
XXE vulnerability in Jenkins pom2config Plugin
Medium
CVE-2021-21700
Stored XSS vulnerability in Jenkins Scriptler Plugin
Medium
CVE-2021-21701
XXE vulnerability in Jenkins Performance Plugin
Medium
CVE-2021-21699
Stored XSS vulnerability in Jenkins Active Choices Plugin
High
CVE-2021-43577
XXE vulnerability in Jenkins OWASP Dependency-Check Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.