dbcve.org
Vulnerability index

Browse CVEs

1,321 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Script Security HIGH 8.8
CVE-2019-1003005EPSS 19%

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbo…

Fix: after 1.50
Fix from $1,950 2019-02-06
Groovy HIGH 8.8
CVE-2019-1003006

A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.0 and earlier in src/main/java/hudson/plugins/groovy/StringScriptSource.java that al…

Fix: after 2.0
Fix from $1,950 2019-02-06
Warnings HIGH 8.8
CVE-2019-1003007

A cross-site request forgery vulnerability exists in Jenkins Warnings Plugin 5.0.0 and earlier in src/main/java/hudson/plugins/warnings/GroovyParser.…

Fix: after 5.0.0
Fix from $1,950 2019-02-06
Warnings Next Generation HIGH 8.8
CVE-2019-1003008

A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/an…

Fix: after 2.1.1
Fix from $1,950 2019-02-06
Job Import HIGH 8.8
CVE-2019-1003016

An exposure of sensitive information vulnerability exists in Jenkins Job Import Plugin 2.1 and earlier in src/main/java/org/jenkins/ci/plugins/jobimp…

Fix: after 2.1
Fix from $1,950 2019-02-06
Token Macro HIGH 8.1
CVE-2019-1003011

An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugi…

Fix: after 2.5
Fix from $1,950 2019-02-06
Active Directory HIGH 7.4
CVE-2019-1003009

An improper certificate validation vulnerability exists in Jenkins Active Directory Plugin 2.10 and earlier in src/main/java/hudson/plugins/active_di…

Fix: after 2.10
Fix from $1,950 2019-02-06
Blue Ocean MEDIUM 6.5
CVE-2019-1003012

A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blueocean-cor…

Fix: after 1.10.1
Fix from $1,600 2019-02-06
Github Oauth MEDIUM 5.9
CVE-2019-1003019

An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorize…

Fix: after 0.29
Fix from $1,600 2019-02-06
Blue Ocean MEDIUM 5.4
CVE-2019-1003013

An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/blueocean…

Fix: after 1.10.1
Fix from $1,600 2019-02-06
Job Import MEDIUM 5.3
CVE-2019-1003017

A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from…

Fix: after 3.0
Fix from $1,600 2019-02-06
Jenkins MEDIUM 6.5
CVE-2018-1000997

A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/o…

Fix: after 2.145
Fix from $1,600 2019-01-23
Script Security HIGH 8.8
CVE-2019-1003000EPSS 98%

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy…

Fix: after 1.49
Fix from $1,950 2019-01-22
Pipeline\ HIGH 8.8
CVE-2019-1003001EPSS 86%

A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins/workflow/cps/CpsFlowDefiniti…

Fix: after 2.61
Fix from $1,950 2019-01-22
Pipeline\ HIGH 8.8
CVE-2019-1003002EPSS 81%

A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src/main/groovy/org/jenkinsci/pl…

Fix: after 1.3.3
Fix from $1,950 2019-01-22
Jenkins HIGH 7.2
CVE-2019-1003003

An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/TokenBased…

Fix: after 2.158
Fix from $1,950 2019-01-22
Jenkins HIGH 7.2
CVE-2019-1003004

An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/Authentica…

Fix: after 2.159
Fix from $1,950 2019-01-22
Jira HIGH 8.8
CVE-2018-1000412

An improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.java that allows attackers with Overall/Read acce…

Fix: after 3.0.1
Fix from $1,950 2019-01-09
Config File Provider HIGH 8.1
CVE-2018-1000414

A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigF…

Fix: after 3.1
Fix from $1,950 2019-01-09
Email Extension Template HIGH 8.1
CVE-2018-1000417

A cross-site request forgery vulnerability exists in Jenkins Email Extension Template Plugin 1.0 and earlier in ExtEmailTemplateManagement.java that …

Fix: after 1.0
Fix from $1,950 2019-01-09
Jenkins HIGH 7.8
CVE-2018-1000410

An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases,…

Fix: after 2.145
Fix from $1,950 2019-01-09
Jenkins MEDIUM 6.5
CVE-2018-1000406

A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.jav…

Fix: after 2.145
Fix from $1,600 2019-01-09
Jenkins MEDIUM 6.5
CVE-2018-1000408

A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSec…

Fix: after 2.145
Fix from $1,600 2019-01-09
Junit MEDIUM 6.5
CVE-2018-1000411

A cross-site request forgery vulnerability exists in Jenkins JUnit Plugin 1.25 and earlier in TestObject.java that allows setting the description of …

Fix: after 1.25
Fix from $1,600 2019-01-09
Jenkins MEDIUM 6.1
CVE-2018-1000407

A cross-site scripting vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/Api.java that al…

Fix: after 2.145
Fix from $1,600 2019-01-09
Git Changelog MEDIUM 6.1
CVE-2018-1000426

A cross-site scripting vulnerability exists in Jenkins Git Changelog Plugin 2.6 and earlier in GitChangelogSummaryDecorator/summary.jelly, GitChangel…

Fix: after 2.6
Fix from $1,600 2019-01-09
Jenkins MEDIUM 5.4
CVE-2018-1000409

A session fixation vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecu…

Fix: after 2.145
Fix from $1,600 2019-01-09
Config File Provider MEDIUM 5.4
CVE-2018-1000413

A cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in configfiles.jelly, providerlist.jelly that allo…

Fix: after 3.1
Fix from $1,600 2019-01-09
Jenkins CRITICAL 9.8
CVE-2018-1000861 KEVEPSS 98%

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/core/src/mai…

Fix: after 2.153
Fix from $2,300 2018-12-10
Script Security HIGH 8.8
CVE-2018-1000865

A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTr…

Fix: after 1.47
Fix from $1,950 2018-12-10