Medium
CVE-2019-10451
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,646
Medium
CVE-2019-10455
Missing permission check in Jenkins Rundeck Plugin
High
CVE-2019-10453
Jenkins Delphix Plugin vulnerable to Cleartext credential storage
Low
CVE-2019-10450
Cleartext Storage of Sensitive Information in Jenkins ElasticBox CI Plugin
Medium
CVE-2019-10439
Jenkins CRX Content Package Deployer Plugin subject to credentials enumeration via Missing Authorization
High
CVE-2019-10440
Jenkins NeoLoad Plugin stores credentials in cleartext
High
CVE-2019-10443
Jenkins iceScrum Plugin stores credentials in Cleartext
Medium
CVE-2019-10447
Jenkins Sofy.AI Plugin stores API token in plain text
Medium
CVE-2019-10444
Jenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation
High
CVE-2019-10448
Cleartext Storage of Sensitive Information in Jenkins Extensive Testing Plugin
High
CVE-2019-10446
Jenkins Cadence vManager Plugin disables SSL/TLS and hostname verification
Medium
CVE-2019-10445
Missing permission checks in Google Kubernetes Engine Jenkins Plugin
Medium
CVE-2019-10442
Jenkins iceScrum Plugin vulnerable to Missing Authorization
Medium
CVE-2019-10441
Jenkins iceScrum Plugin vulnerable to Cross-site Request Forgery
Medium
CVE-2019-10436
Improper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin
Medium
CVE-2019-10438
Jenkins CRX Content Package Deployer Plugin subject to Missing Authorization
High
CVE-2019-10437
Jenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery
High
CVE-2019-14832
Keycloak Unauthenticated Access
Medium
CVE-2019-14838
Wildfly Authorization Misconfiguration
Medium
CVE-2019-14858
A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to
Medium
CVE-2019-17496
Craft CMS XSS Vulnerability
Medium
CVE-2019-17433
z-song laravel-admin XSS via the Slug or Name on the Roles screen
High
CVE-2019-17109
Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.
High
CVE-2019-15715
MantisBT Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.