GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,293
Erlang
31
GitHub Actions
21
Go
2,061
Maven
5,000+
npm
3,744
NuGet
668
pip
3,423
Pub
12
RubyGems
892
Rust
875
Swift
36
Unreviewed advisories
All unreviewed
5,000+
1,067 advisories
Filter by severity
Jenkins AppDynamics Dashboard Plugin has insufficiently protected credentials
Moderate
CVE-2019-1003039
was published
for
org.jenkins-ci.plugins:appdynamics-dashboard
(Maven)
May 13, 2022
ECS Publisher Plugin stored and displayed API token in plain text
Moderate
CVE-2019-1003045
was published
for
de.eacg:ecs-publisher
(Maven)
May 13, 2022
Jenkins Repository Connector Plugin has insufficiently protected credentials
Low
CVE-2019-1003038
was published
for
org.jenkins-ci.plugins:repository-connector
(Maven)
May 13, 2022
Jenkins Jabber Server Plugin stores credentials in plain text
Low
CVE-2019-10288
was published
for
de.e-nexus:jabber-server-plugin
(Maven)
May 13, 2022
Jenkins youtrack-plugin Plugin stored credentials in plain text
Low
CVE-2019-10287
was published
for
org.jenkins-ci.plugins:youtrack-plugin
(Maven)
May 13, 2022
Jenkins mabl Plugin stores credentials in plain text
Moderate
CVE-2019-10283
was published
for
com.mabl.integration.jenkins:mabl-integration
(Maven)
May 13, 2022
Jenkins DeployHub Plugin stores credentials in plain text
Moderate
CVE-2019-10286
was published
for
com.openmake:deployhub
(Maven)
May 13, 2022
Jenkins Diawi Upload Plugin stores credentials in plain text
Moderate
CVE-2019-10284
was published
for
org.jenkins-ci.plugins:diawi-upload
(Maven)
May 13, 2022
Jenkins Minio Storage Plugin stores credentials in plain text
Low
CVE-2019-10285
was published
for
org.jenkins-ci.plugins:minio-storage
(Maven)
May 13, 2022
Jenkins CloudCoreo DeployTime Plugin stores credentials in plain text
Low
CVE-2019-10299
was published
for
com.cloudcoreo.plugins:cloudcoreo-deploytime
(Maven)
May 13, 2022
Jenkins Netsparker Enterprise Scan Plugin stored credentials in plain text
Low
CVE-2019-10291
was published
for
org.jenkins-ci.plugins:netsparker-cloud-scan
(Maven)
May 13, 2022
Jenkins Koji Plugin stores credentials in plain text
Low
CVE-2019-10298
was published
for
org.jenkins-ci.plugins:koji
(Maven)
May 13, 2022
Jenkins Sametime Plugin stores credentials in plain text
Low
CVE-2019-10297
was published
for
org.jenkins-ci.plugins:sametime
(Maven)
May 13, 2022
Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text
Low
CVE-2019-10281
was published
for
org.jenkins-ci.plugins:relution-publisher
(Maven)
May 13, 2022
Jenkins Klaros-Testmanagement Plugin stores credentials in plain text
Moderate
CVE-2019-10282
was published
for
hudson.plugins.klaros:klaros-testmanagement
(Maven)
May 13, 2022
Jenkins Serena SRA Deploy Plugin stores credentials in plain text
Low
CVE-2019-10296
was published
for
com.urbancode.ds.jenkins.plugins:sra-deploy
(Maven)
May 13, 2022
Jenkins crittercism-dsym Plugin stores API key in plain text
Moderate
CVE-2019-10295
was published
for
org.jenkins-ci.plugins:crittercism-dsym
(Maven)
May 13, 2022
Jenkins Kmap Plugin stores credentials in plain text
High
CVE-2019-10294
was published
for
org.jenkins-ci.plugins:kmap-jenkins
(Maven)
May 13, 2022
Jenkins StarTeam Plugin stores credentials in plain text
High
CVE-2019-10277
was published
for
hudson.plugins:starteam
(Maven)
May 13, 2022
Jenkins Assembla Auth Plugin stores credentials in plain text
High
CVE-2019-10280
was published
for
org.jenkins-ci.plugins:assembla-auth
(Maven)
May 13, 2022
An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway...
High
Unreviewed
CVE-2019-6549
was published
May 13, 2022
Users with Site-level permissions can access files containing the username-encrypted passwords of...
Moderate
Unreviewed
CVE-2019-5615
was published
May 13, 2022
Cloud Foundry CredHub CLI, versions prior to 2.2.1, inadvertently writes authentication...
High
Unreviewed
CVE-2019-3782
was published
May 13, 2022
Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains...
High
Unreviewed
CVE-2019-3780
was published
May 13, 2022
Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service...
Low
Unreviewed
CVE-2013-4869
was published
May 13, 2022
ProTip!
Advisories are also available from the
GraphQL API