| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
Jenkins Passwords transmitted in plain text (CVE-2020-2251)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7330)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2058)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2068)
|
|
|
Low
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3663)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3665)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1806)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1810)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1814)
|
|
|
High
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5323)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5324)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0788)
|
|
|
Critical
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3722)
|
|
|
Medium
|
|
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3725)
|
|
|
Medium
|
|
Jenkins Protection Mechanism Failure Vulnerability (CVE-2021-21690 )
|
|
|
Critical
|
|
Jenkins Protection Mechanism Failure Vulnerability (CVE-2021-21696 )
|
|
|
Critical
|
|
Jenkins Resource Management Errors Vulnerability (CVE-2014-3661)
|
|
|
Medium
|
|
Jenkins Server-Side Request Forgery (SSRF) Vulnerability (CVE-2018-1000067)
|
|
|
Medium
|
|
Jenkins Session Fixation Vulnerability (CVE-2018-1000409)
|
|
|
Medium
|
|
Jenkins Session Fixation Vulnerability (CVE-2021-21671)
|
|
|
High
|
|
Jenkins Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2021-21615)
|
|
|
Medium
|
|
Jenkins Uncontrolled Resource Consumption Vulnerability (CVE-2012-0785)
|
|
|
High
|
|
Jenkins Uncontrolled Resource Consumption Vulnerability (CVE-2021-28165)
|
|
|
High
|
|
Jenkins Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-43497)
|
|
|
High
|
|
Jenkins Use of Insufficiently Random Values Vulnerability (CVE-2020-2099)
|
|
|
High
|
|
Jenkins user enumeration
|
|
|
Low
|
|
Jenkins weak password
|
|
|
High
|
|
JetBrains .idea project directory
|
|
|
Medium
|
|
JetLeak vulnerability
|
|
|
High
|
|
Jetpack 2.9.3: Critical Security Update
|
|
|
High
|
|
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-26048)
|
|
|
Medium
|
|
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-6762)
|
|
|
Medium
|
|
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-8184)
|
|
|
Medium
|
|
Jetty Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-22201)
|
|
|
High
|
|
Jetty ConcatServlet Information Disclosure (CVE-2021-28169)
|
|
|
Medium
|
|
Jetty CVE-2017-7656 Vulnerability (CVE-2017-7656)
|
|
|
High
|
|
Jetty CVE-2018-12536 Vulnerability (CVE-2018-12536)
|
|
|
Medium
|
|
Jetty CVE-2020-27218 Vulnerability (CVE-2020-27218)
|
|
|
Medium
|
|
Jetty CVE-2023-26049 Vulnerability (CVE-2023-26049)
|
|
|
Medium
|
|
Jetty CVE-2023-40167 Vulnerability (CVE-2023-40167)
|
|
|
Medium
|
|
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-5045)
|
|
|
High
|
|
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2080)
|
|
|
High
|
|
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28169)
|
|
|
Medium
|
|
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-34429)
|
|
|
Medium
|
|
Jetty Improper Access Control Vulnerability (CVE-2016-4800)
|
|
|
Critical
|
|
Jetty Improper Input Validation Vulnerability (CVE-2022-2047)
|
|
|
Low
|
|
Jetty Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-28163)
|
|
|
Low
|
|
Jetty Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-5046)
|
|
|
Medium
|
|
Jetty Improper Neutralization of Quoting Syntax Vulnerability (CVE-2023-36479)
|
|
|
Medium
|
|
Jetty Improper Resource Shutdown or Release Vulnerability (CVE-2022-2191)
|
|
|
High
|
|
Jetty Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-5047)
|
|
|
Critical
|
|
Jetty Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-7658)
|
|
|
Critical
|
|
Jetty Information Disclosure (CVE-2021-34429)
|
|
|
Medium
|
|
Jetty Insufficient Session Expiration Vulnerability (CVE-2021-34428)
|
|
|
Low
|
|
Jetty Integer Overflow or Wraparound Vulnerability (CVE-2017-7657)
|
|
|
Critical
|
|
Jetty Integer Overflow or Wraparound Vulnerability (CVE-2023-36478)
|
|
|
High
|
|
Jetty Observable Discrepancy Vulnerability (CVE-2017-9735)
|
|
|
High
|
|
Jetty Other Vulnerability (CVE-2020-27216)
|
|
|
High
|
|
Jetty Other Vulnerability (CVE-2024-6763)
|
|
|
Medium
|
|
Jetty Session Fixation Vulnerability (CVE-2018-12538)
|
|
|
High
|
|
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2020-27223)
|
|
|
High
|
|
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2021-28165)
|
|
|
High
|
|
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2022-2048)
|
|
|
High
|
|
Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
|
|
|
High
|
|
Jetty Weak Authentication Vulnerability (CVE-2023-41900)
|
|
|
Medium
|
|
Jira Projects accessible anonymously
|
|
|
Low
|
|
Jira QueryComponent Information Disclosure (CVE-2020-14179)
|
|
|
Medium
|
|
JIRA Security Advisory 2012-08-28
|
|
|
High
|
|
JIRA Security Advisory 2013-02-21
|
|
|
High
|
|
JIRA Security Advisory 2014-02-26
|
|
|
High
|
|
Jira Seraph Authentication Bypass (CVE-2022-0540)
|
|
|
Critical
|
|
Jira SSTI CVE-2019-11581
|
|
|
High
|
|
Jira Unauthorized SSRF via REST API
|
|
|
High
|
|
Jira Unauthorized User Enumeration (CVE-2020-14181)
|
|
|
Medium
|
|
Jira Unauthorized User Enumeration via UserPickerBrowser
|
|
|
Low
|
