High
CVE-2017-12852
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2017-12867
SimpleSAMLphp Invalid token creation and validation
High
CVE-2017-11883
Denial of service in ASP.NET Core
Critical
CVE-2017-11767
ChakraCore vulnerable to privilege escalation
Critical
CVE-2017-11366
Codiad Vulnerable to Shell Command Injection
High
CVE-2017-10993
Contao Core directory traversal vulnerability
High
CVE-2017-10843
Arbitrary file delete in baserCMS
High
CVE-2017-1000483
Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part
Medium
CVE-2017-1000424
Electron vulnerable to URL spoofing via PDFium
High
CVE-2017-1000403
Arbitrary code execution vulnerability in Jenkins Speaks! Plugin
High
CVE-2017-1000387
Jenkins Build-Publisher plugin has Insufficiently Protected Credentials
High
CVE-2017-1000451
fs-git command injection vulnerability
High
CVE-2017-1000361
OpenDaylight Controller DoS
Medium
CVE-2017-1000360
OpenDaylight NULL Pointer Dereference
Critical
CVE-2017-1000245
Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext
Critical
CVE-2017-1000220
PIDUsage Enables OS Command Injection
Medium
CVE-2017-1000221
Opencast has Incorrect Permission Assignment
High
CVE-2017-1000107
Sandbox bypass in Jenkins Script Security Plugin sandbox bypass
High
CVE-2017-1000106
Improper Authentication in Jenkins Blue Ocean Plugin
Medium
CVE-2017-1000104
Improper Privilege Management in Jenkins Config File Provider Plugin
Medium
CVE-2017-1000084
Parameterized Trigger Plugin fails to check Item/Build permission
Medium
CVE-2017-1000110
Improper Authentication in Jenkins Blue Ocean Plugin
Critical
CVE-2017-1000116
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.
High
CVE-2017-1000096
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.