High
CVE-2018-1000189
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,686
High
CVE-2018-1000197
Jenkins Black Duck Hub Plugin allowed any user with Overall/Read to read and write its configuration
High
CVE-2018-1000146
Liquibase Runner Plugin allows users to load arbitrary Java code into controller JVM
Medium
CVE-2018-1000145
Jenkins Perforce Plugin uses ineffective credentials encryption
Medium
CVE-2018-1000152
Jenkins vSphere Plugin incorrect authorization vulnerability
High
CVE-2018-1000165
LightSAML Incorrect Access Control vulnerability
Medium
CVE-2018-1000114
Jenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processes
Medium
CVE-2018-1000111
Jenkins Subversion Plugin Incorrect Authorization vulnerability
Medium
CVE-2018-1000112
Incorrect Authorization in Jenkins Mercurial Plugin
Critical
CVE-2018-1000134
Weak Password Requirements in UnboundID LDAP SDK
High
CVE-2018-1000075
RubyGems Infinite Loop vulnerability
Medium
CVE-2018-1000105
Incorrect Authorization in Jenkins Gerrit Trigger Plugin
Medium
CVE-2018-1000107
Improper authorization in Jenkins Job and Node Ownership Plugin
Low
CVE-2018-1000104
Jenkins Coverity Plugin has Insufficiently Protected Credentials
Medium
CVE-2018-1000106
Incorrect Authorization in Jenkins Gerrit Trigger Plugin
Medium
CVE-2018-1000109
Jenkins Google Play Android Publisher Plugin allows attacker to obtain credential IDs
Medium
CVE-2018-1000110
Incorrect Authorization in Jenkins Git Plugin
Medium
CVE-2018-1000057
Jenkins Credentials Binding Plugin has Insufficiently Protected Credentials
High
CVE-2018-1000025
Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability
High
CVE-2018-0818
ChakraCore RCE Vulnerability
High
CVE-2018-0572
baserCMS vulnerable to Access Control Bypass
Medium
CVE-2018-0573
baserCMS Access Control Bypass
Medium
CVE-2017-9797
Apache Geode vulnerable to Exposure of Sensitive Information
High
CVE-2017-9790
Use after free in Apache Mesos
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.