Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-1000400Mediumorg.jenkins-ci.main:jenkins-core: Missing Authorization in Jenkins CVE-2017-1000243Mediumorg.jvnet.hudson.plugins:favorite: Missing permission check in Jenkins Favorite Plugin CVE-2017-1000086Highorg.jenkins-ci.plugins:periodicbackup: Missing permission checks in Jenkins Periodic Backup Plugin allow every user to change settings CVE-2018-14667Criticalorg.richfaces:richfaces-core: Richfaces vulnerable to arbitrary code execution CVE-2019-1003052Loworg.jenkins-ci.plugins:aws-beanstalk-publisher-plugin: Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text CVE-2019-1003051Loworg.jvnet.hudson.plugins:ircbot: Jenkins IRC Plugin stores credentials in plain text CVE-2019-1003056Mediumorg.jenkins-ci.plugins:websphere-deployer: Jenkins WebSphere Deployer Plugin stores credentials in plain text CVE-2019-1003057Loworg.jenkins-ci.plugins:bitbucket-approve: Jenkins Bitbucket Approve Plugin stores credentials in plain text CVE-2019-1003053Highorg.jenkins-ci.plugins:hockeyapp: Jenkins HockeyApp Plugin stores credentials in plain text CVE-2019-1003060Loworg.jenkins-ci.plugins:zap: Jenkins OWASP ZAP Plugin stores unencrypted credentials CVE-2019-1003059Mediumorg.jvnet.hudson.plugins:ftppublisher: Missing permission check in Jenkins FTP publisher Plugin CVE-2019-1003064Loworg.jenkins-ci.plugins:aws-device-farm: Jenkins aws-device-farm Plugin stores credentials in plain text CVE-2019-1003070Loworg.jenkins-ci.plugins:veracode-scanner: Jenkins veracode-scanner Plugin stores credentials in plain text CVE-2019-1003054Mediuminfo.bluefloyd.jenkins:jenkins-jira-issue-updater: Jenkins Jira Issue Updater Plugin stores credentials in plain text CVE-2019-1003063Loworg.jenkins-ci.plugins:snsnotify: Jenkins Amazon SNS Build Notifier Plugin stores credentials in plain text CVE-2019-1003067Mediumorg.jenkins-ci.plugins:trac-publisher-plugin: Jenkins Trac Publisher Plugin stores credentials in plain text CVE-2019-1003068Mediumcom.inkysea.vmware.vra:vmware-vrealize-automation-plugin: Jenkins VMware vRealize Automation Plugin Missing Encryption of Sensitive Data CVE-2019-1003069Loworg.jenkins-ci.plugins:aqua-security-scanner: Jenkins Aqua Security Scanner Plugin stores credentials in plain text CVE-2019-1003061Mediumorg.jenkins-ci.plugins:jenkins-cloudformation-plugin: Jenkins CloudFormation Plugin stores credentials in plain text CVE-2019-1003055Loworg.jvnet.hudson.plugins:ftppublisher: Jenkins FTP publisher Plugin stores credentials in plain text CVE-2019-1003065Loworg.jenkins-ci.plugins:cloudshare-docker: Jenkins CloudShare Docker-Machine Plugin stores credentials in plain text CVE-2019-1003062Loworg.jenkins-ci.plugins:aws-cloudwatch-logs-publisher: Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials in plain text CVE-2019-1003066Loworg.jvnet.hudson.plugins:bugzilla: Jenkins Bugzilla Plugin stores credentials in plain text CVE-2019-1003075Loworg.jenkins-ci.plugins:audit2db: Jenkins Audit to Database Plugin stores credentials in plain text CVE-2019-1003072Mediumorg.jenkins-ci.plugins:wildfly-deployer: Jenkins wildFly Deployer Plugin stores credentials in plain text

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo