Medium
CVE-2019-10467
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,646
Medium
CVE-2019-10463
Jenkins Dynatrace Plugin contains Incorrect Default Permissions
High
CVE-2019-10462
Jenkins Dynatrace Plugin vulnerable to Cross-Site Request Forgery
Medium
CVE-2019-10459
Jenkins Mattermost Notification Plugin contains unencrypted storage of secret token
Medium
CVE-2019-10469
Jenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization
High
CVE-2019-10466
Jenkins 360 FireLine Plugin vulnerable to XML External Entity Reference
High
CVE-2019-16530
Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager
Critical
CVE-2018-7269
Yii SQL injection vulnerability
Critical
CVE-2019-17625
Rambox RCE Vulnerability
Medium
CVE-2019-17576
Dolibarr Cross-site Scripting via outgoing email setup feature
Medium
CVE-2019-17577
Dolibarr Cross-site Scripting via outgoing email setup feature
Medium
CVE-2019-17578
Dolibarr Cross-site Scripting vulnerability
Critical
CVE-2019-16699
sr_freecap for Typo3 RCE Vulnerability
Critical
CVE-2019-16700
slub_events for Typo3 Arbitrary File Upload
Medium
CVE-2019-17223
Dolibarr ERP and CRM HTML Injection
High
CVE-2019-16682
url_redirect for Typo3 SQLi Vulnerability
Medium
CVE-2019-16698
direct_mail for Typo3 sensitive data exposure
Critical
CVE-2019-13116
Mulesoft Mule Unsafe Deserialization
Critical
CVE-2019-10458
Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin
Medium
CVE-2019-10457
Missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin
Medium
CVE-2019-10449
Jenkins Fortify on Demand Plugin stores credentials in plain text
Medium
CVE-2019-10454
Jenkins Rundeck Plugin CSRF vulnerability
Medium
CVE-2019-10452
Jenkins View26 Test-Reporting Plugin stores access token in plain text
Medium
CVE-2019-10456
Jenkins Oracle Cloud Infrastructure Compute Classic Plugin cross-site request forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.