Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins bumblebee hp alm, jenkins project bumblebee hp alm plugin +1 moreJenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validationCVE-2019-10444Fix available6.5 Medium
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin stores credentials in CleartextCVE-2019-10443Fix available8.8 High
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin vulnerable to Missing AuthorizationCVE-2019-10442Fix available4.3 Medium
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin vulnerable to Cross-site Request ForgeryCVE-2019-10441Fix available4.3 Medium
- jenkins neoload, jenkins project neoload plugin +1 moreJenkins NeoLoad Plugin stores credentials in cleartextCVE-2019-10440Fix available8.8 High
- jenkins crx content package deployer, jenkins project crx content package deployer plugin +1 moreJenkins CRX Content Package Deployer Plugin subject to credentials enumeration via Missing AuthorizationCVE-2019-10439Fix available4.3 Medium
- jenkins crx content package deployer, jenkins project crx content package deployer plugin +1 moreJenkins CRX Content Package Deployer Plugin subject to Missing AuthorizationCVE-2019-10438Fix available6.5 Medium
- jenkins crx content package deployer, jenkins project crx content package deployer plugin +1 moreJenkins CRX Content Package Deployer Plugin subject to Cross-Site Request ForgeryCVE-2019-10437Fix available8.8 High
- jenkins google oauth credentials, jenkins project google oauth credentials plugin +1 moreImproper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials PluginCVE-2019-10436Fix available6.5 Medium
- jenkins sourcegear vault, jenkins project sourcegear vault plugin +1 moreJenkins SourceGear Vault plugin transmits credentials in plain textCVE-2019-104357.5 High
- jenkins ldap email, jenkins project ldap email plugin +1 moreJenkins LDAP Email Plugin shows plain text password in configuration formCVE-2019-104347.5 High
- jenkins dingding, jenkins project dingding[钉钉] plugin +1 moreDingTalk Plugin stores credentials in plain textCVE-2019-10433Fix available3.3 Low
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin vulnerable to Cross-site ScriptingCVE-2019-10432Fix available5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreImproper Control of Generation of Code in Jenkins Script Security PluginCVE-2019-10431Fix available9.9 Critical
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreJenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain textCVE-2019-10430Fix available5.5 Medium
- jenkins gitlab logo, jenkins project gitlab logo plugin +1 moreJenkins GitLab Logo Plugin stores credentials unencryptedCVE-2019-10429Fix available5.5 Medium
- jenkins aqua security scanner, jenkins project aqua security scanner plugin +1 moreJenkins Aqua Security Scanner Plugin showed plain text password in configuration formCVE-2019-10428Fix available7.5 High
- jenkins aqua microscanner, jenkins project aqua microscanner plugin +1 moreJenkins Aqua MicroScanner Plugin showed plain text credential in configuration formCVE-2019-10427Fix available5.3 Medium
- jenkins gem publisher, jenkins project gem publisher plugin +1 moreJenkins Gem Publisher Plugin stores credentials as plaintextCVE-2019-104265.5 Medium
- jenkins google calendar, jenkins project google calendar plugin +1 moreJenkins Google Calendar Plugin has Insufficiently Protected CredentialsCVE-2019-104256.5 Medium
- jenkins eloyente, jenkins project eloyente plugin +1 moreJenkins elOyente Plugin has Insufficiently Protected CredentialsCVE-2019-104245.5 Medium
- jenkins codescan, jenkins project codescan plugin +1 moreJenkins CodeScan Plugin has Insufficiently Protected CredentialsCVE-2019-104235.5 Medium
- jenkins call remote job, jenkins project call remote job plugin +1 moreJenkins Call Remote Job Plugin has Insufficiently Protected CredentialsCVE-2019-104226.5 Medium
- jenkins project azure event grid build notifier plugin, jenkins azure event grid notifier +1 moreJenkins Azure Event Grid Build Notifier Plugin has Insufficiently Protected CredentialsCVE-2019-104214.3 Medium
- jenkins assembla, jenkins project assembla plugin +1 moreJenkins Assembla Plugin has Insufficiently Protected CredentialsCVE-2019-104205.5 Medium
- jenkins vfabric application director, jenkins project vfabric application director plugin +1 moreJenkins vFabric Application Director Plugin Insufficiently Protected CredentialsCVE-2019-104195.5 Medium
- jenkins project kubernetes :: pipeline :: arquillian steps plugin, jenkins kubernetes pipeline +1 moreIncorrect Authorization in Jenkins Kubernetes :: Pipeline :: Arquillian Steps PluginCVE-2019-104189.9 Critical
- jenkins project kubernetes :: pipeline :: kubernetes steps plugin, jenkins kubernetes pipeline +1 moreIncorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps PluginCVE-2019-104179.9 Critical
- jenkins violation comments to gitlab, jenkins project violation comments to gitlab plugin +1 moreViolation Comments to GitLab Plugin has Insufficiently Protected CredentialsCVE-2019-10416Fix available6.5 Medium
- jenkins violation comments to gitlab, jenkins project violation comments to gitlab plugin +1 moreJenkins Violation Comments to GitLab Plugin has Insufficiently Protected CredentialsCVE-2019-10415Fix available6.5 Medium
- jenkins git changelog, jenkins project git changelog plugin +1 moreJenkins Git Changelog Plugin has Insufficiently Protected CredentialsCVE-2019-10414Fix available6.5 Medium
- jenkins project data theorem: ci/cd plugin, jenkins data theorem mobile app security +1 moreJenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected CredentialsCVE-2019-10413Fix available6.5 Medium
- jenkins inedo proget, jenkins project inedo proget plugin +1 moreJenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive InformationCVE-2019-10412Fix available7.5 High
- jenkins inedo buildmaster, jenkins project inedo buildmaster plugin +1 moreJenkins Inedo BuildMaster Plugin showed plain text password in configuration formCVE-2019-10411Fix available7.5 High
- jenkins log parser, jenkins project log parser plugin +1 moreJenkins Log Parser Plugin vulnerable to Cross-site ScriptingCVE-2019-10410Fix available5.4 Medium
- jenkins project inheritance, jenkins project inheritance plugin +1 moreMissing permission check in Jenkins Project Inheritance PluginCVE-2019-10409Fix available4.3 Medium
- jenkins project inheritance, jenkins project inheritance plugin +1 moreJenkins Project Inheritance Plugin vulnerable to Cross-Site Request ForgeryCVE-2019-10408Fix available4.3 Medium
- jenkins project inheritance, jenkins project inheritance plugin +1 moreProject Inheritance Plugin showed secret environment variables defined in Mask Passwords PluginCVE-2019-10407Fix available6.5 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10406Fix available4.8 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2019-10405Fix availableEPSS 65.3%5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10404Fix available5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10403Fix available5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10402Fix available5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10401Fix available5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-10400Fix available4.2 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-10399Fix available4.2 Medium
- jenkins beaker builder, jenkins project beaker builder plugin +1 moreJenkins Beaker Builder Plugin has Insufficiently Protected CredentialsCVE-2019-10398Fix available5.5 Medium
- jenkins project aqua security serverless scanner plugin, jenkins aqua security severless scanner +1 moreJenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fieldsCVE-2019-10397Fix available3.1 Low
- jenkins dashboard view, jenkins project dashboard view plugin +1 moreJenkins Dashboard View Plugin vulnerable to Cross-site ScriptingCVE-2019-10396Fix available5.4 Medium
- jenkins build environment, jenkins project build environment plugin +1 moreJenkins Build Environment Plugin vulnerable to Cross-site ScriptingCVE-2019-10395Fix available5.4 Medium
- Show moreLoading…