org.jenkins-ci.main:jenkins-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2014-2068Loworg.jenkins-ci.main:jenkins-core: Jenkins allows attackers to obtain sensitive informationCVE-2015-7536Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2014-3662Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2014-3663Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobsCVE-2014-3665Mediumorg.jenkins-ci.main:jenkins-core: Jenkins improperly ensures trust separationCVE-2014-3666Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows for Code Execution via Crafted Packet to the CLICVE-2014-3667Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin CodeCVE-2015-1810Mediumorg.jenkins-ci.main:jenkins-core: Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation CVE-2015-1806Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows for Privilege Escalation by Remote Authenticated UsersCVE-2014-3680Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2015-1813Loworg.jenkins-ci.main:jenkins-core: Jenkins allows Cross-Site Scripting (XSS)CVE-2015-1812Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Cross-site Scripting vulnerabilityCVE-2015-1808Loworg.jenkins-ci.main:jenkins-core: Jenkins Vulnerable to Denial of Service (DoS)CVE-2015-1814Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows for Privilege Escalation by Remote Authenticated UsersCVE-2013-2034Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Cross-Site Request Forgery vulnerabilitiesCVE-2017-1000362Criticalorg.jenkins-ci.main:jenkins-core: Exposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2013-5573Loworg.jenkins-ci.main:jenkins-core: Jenkins allows Cross-Site Scripting (XSS) in User ConfigurationCVE-2014-2059Mediumorg.jenkins-ci.main:jenkins-core: Jenkins directory traversal vulnerabilityCVE-2014-2067Mediumorg.jenkins-ci.main:jenkins-core: Jenkins cross-site scripting (XSS) vulnerabilityCVE-2014-3664Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Path Traversal vulnerabilityCVE-2014-9635Mediumorg.jenkins-ci.main:jenkins-core: Jenkins HttpOnly flag not Set for session cookiesCVE-2014-9634Mediumorg.jenkins-ci.main:jenkins-core: Jenkins secure flag not set on session cookiesCVE-2017-17383Mediumorg.jenkins-ci.main:jenkins-core: Cross-site Scripting in Jenkins CoreCVE-2016-0789Mediumorg.jenkins-ci.main:jenkins-core: Jenkins has CRLF Injection Vulnerability in the CLICVE-2016-0788Criticalorg.jenkins-ci.main:jenkins-core: Jenkins allows Execution of Code by Opening a JRMP Listener

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo