Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 149 of 164.
- CVE-2019-10464 Jenkins Deploy WebLogic Plugin cross-site request forgery vulnerability
- CVE-2019-10463 Jenkins Dynatrace Plugin contains Incorrect Default Permissions
- CVE-2019-10462 Jenkins Dynatrace Plugin vulnerable to Cross-Site Request Forgery
- CVE-2019-10461 Jenkins Dynatrace Plugin vulnerable to Insufficiently Protected Credentials
- CVE-2019-10460 Jenkins Bitbucket OAuth Plugin contains Insufficiently Protected Credentials
- CVE-2019-1046 Windows GDI Information Disclosure Vulnerability
- CVE-2019-10459 Jenkins Mattermost Notification Plugin contains unencrypted storage of secret token
- CVE-2019-10458 Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin
- CVE-2019-10457 Missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin
- CVE-2019-10456 Jenkins Oracle Cloud Infrastructure Compute Classic Plugin cross-site request forgery vulnerability
- CVE-2019-10455 Missing permission check in Jenkins Rundeck Plugin
- CVE-2019-10454 Jenkins Rundeck Plugin CSRF vulnerability
- CVE-2019-10453 Jenkins Delphix Plugin vulnerable to Cleartext credential storage
- CVE-2019-10452 Jenkins View26 Test-Reporting Plugin stores access token in plain text
- CVE-2019-10451 Jenkins SOASTA CloudTest Plugin stores API token in plain text
- CVE-2019-10450 Cleartext Storage of Sensitive Information in Jenkins ElasticBox CI Plugin
- CVE-2019-1045 Windows Network File System Elevation of Privilege Vulnerability
- CVE-2019-10449 Jenkins Fortify on Demand Plugin stores credentials in plain text
- CVE-2019-10448 Cleartext Storage of Sensitive Information in Jenkins Extensive Testing Plugin
- CVE-2019-10447 Jenkins Sofy.AI Plugin stores API token in plain text
- CVE-2019-10446 Jenkins Cadence vManager Plugin disables SSL/TLS and hostname verification
- CVE-2019-10445 Missing permission checks in Google Kubernetes Engine Jenkins Plugin
- CVE-2019-10444 Jenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation
- CVE-2019-10443 Jenkins iceScrum Plugin stores credentials in Cleartext
- CVE-2019-10442 Jenkins iceScrum Plugin vulnerable to Missing Authorization
- CVE-2019-10441 Jenkins iceScrum Plugin vulnerable to Cross-site Request Forgery
- CVE-2019-10440 Jenkins NeoLoad Plugin stores credentials in cleartext
- CVE-2019-1044 Windows Secure Kernel Mode Security Feature Bypass Vulnerability
- CVE-2019-10439 Jenkins CRX Content Package Deployer Plugin subject to credentials enumeration via Missing Authorization
- CVE-2019-10438 Jenkins CRX Content Package Deployer Plugin subject to Missing Authorization
- CVE-2019-10437 Jenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery
- CVE-2019-10436 Improper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin
- CVE-2019-10435 Jenkins SourceGear Vault plugin transmits credentials in plain text
- CVE-2019-10434 Jenkins LDAP Email Plugin shows plain text password in configuration form
- CVE-2019-10433 DingTalk Plugin stores credentials in plain text
- CVE-2019-10432 Jenkins HTML Publisher Plugin vulnerable to Cross-site Scripting
- CVE-2019-10431 Improper Control of Generation of Code in Jenkins Script Security Plugin
- CVE-2019-10430 Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text
- CVE-2019-1043 Comctl32 Remote Code Execution Vulnerability
- CVE-2019-10429 Jenkins GitLab Logo Plugin stores credentials unencrypted
- CVE-2019-10428 Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form
- CVE-2019-10427 Jenkins Aqua MicroScanner Plugin showed plain text credential in configuration form
- CVE-2019-10426 Jenkins Gem Publisher Plugin stores credentials as plaintext
- CVE-2019-10425 Jenkins Google Calendar Plugin has Insufficiently Protected Credentials
- CVE-2019-10424 Jenkins elOyente Plugin has Insufficiently Protected Credentials
- CVE-2019-10423 Jenkins CodeScan Plugin has Insufficiently Protected Credentials
- CVE-2019-10422 Jenkins Call Remote Job Plugin has Insufficiently Protected Credentials
- CVE-2019-10421 Jenkins Azure Event Grid Build Notifier Plugin has Insufficiently Protected Credentials
- CVE-2019-10420 Jenkins Assembla Plugin has Insufficiently Protected Credentials
- CVE-2019-10419 Jenkins vFabric Application Director Plugin Insufficiently Protected Credentials
- CVE-2019-10418 Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin
- CVE-2019-10417 Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin
- CVE-2019-10416 Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
- CVE-2019-10415 Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
- CVE-2019-10414 Jenkins Git Changelog Plugin has Insufficiently Protected Credentials
- CVE-2019-10413 Jenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials
- CVE-2019-10412 Jenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive Information
- CVE-2019-10411 Jenkins Inedo BuildMaster Plugin showed plain text password in configuration form
- CVE-2019-10410 Jenkins Log Parser Plugin vulnerable to Cross-site Scripting
- CVE-2019-1041 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2019-10409 Missing permission check in Jenkins Project Inheritance Plugin
- CVE-2019-10408 Jenkins Project Inheritance Plugin vulnerable to Cross-Site Request Forgery
- CVE-2019-10407 Project Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin
- CVE-2019-10406 Improper Neutralization of Input During Web Page Generation in Jenkins
- CVE-2019-10405 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
- CVE-2019-10404 Improper Neutralization of Input During Web Page Generation in Jenkins
- CVE-2019-10403 Improper Neutralization of Input During Web Page Generation in Jenkins
- CVE-2019-10402 Improper Neutralization of Input During Web Page Generation in Jenkins
- CVE-2019-10401 Improper Neutralization of Input During Web Page Generation in Jenkins
- CVE-2019-10400 Sandbox bypass vulnerability in Jenkins Script Security Plugin
- CVE-2019-1040 Windows NTLM Tampering Vulnerability
- CVE-2019-10399 Sandbox bypass vulnerability in Jenkins Script Security Plugin
- CVE-2019-10398 Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials
- CVE-2019-10397 Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields
- CVE-2019-10396 Jenkins Dashboard View Plugin vulnerable to Cross-site Scripting
- CVE-2019-10395 Jenkins Build Environment Plugin vulnerable to Cross-site Scripting
- CVE-2019-10394 Sandbox bypass vulnerability in Jenkins Script Security Plugin
- CVE-2019-10393 Sandbox bypass vulnerability in Script Security Plugin
- CVE-2019-10392 Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
- CVE-2019-10391 Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields
- CVE-2019-10390 Jenkins Splunk Plugin Sandbox Bypass
- CVE-2019-1039 Windows Kernel Information Disclosure Vulnerability
- CVE-2019-10389 Missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin
- CVE-2019-10388 Relution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request Forgery
- CVE-2019-10387 Missing permission check in Jenkins XL TestView Plugin
- CVE-2019-10386 Cross-site request forgery vulnerability in Jenkins XL TestView Plugin
- CVE-2019-10385 Jenkins eggplant-plugin Plugin stores credentials in plain text
- CVE-2019-10384 Cross-Site Request Forgery in Jenkins
- CVE-2019-10383 Improper Neutralization of Input During Web Page Generation in Jenkins
- CVE-2019-10382 Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation
- CVE-2019-10381 Jenkins Codefresh Integration Plugin Improper Certificate Validation vulnerability
- CVE-2019-10380 Jenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerability
- CVE-2019-1038 Microsoft Browser Memory Corruption Vulnerability
- CVE-2019-10379 Jenkins Google Cloud Messaging Notification Plugin stores credentials in plain text
- CVE-2019-10378 Jenkins TestLink Plugin stores credentials in plain text
- CVE-2019-10377 Missing permission check in Jenkins Avatar Plugin
- CVE-2019-10376 Jenkins Wall Display Plugin Cross-site Scripting vulnerability
- CVE-2019-10375 Arbitrary file read vulnerability in Jenkins File System SCM Plugin
- CVE-2019-10374 Jenkins PegDown Formatter Plugin has Cross-site Scripting vulnerability
- CVE-2019-10373 Jenkins Build Pipeline Plugin vulnerable to Cross-site Scripting