Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtrosJenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks
Infinite Loop in Jenkins Core
Missing Release of Resource after Effective Lifetime in Jenkins
Missing Encryption of Sensitive Data in Apache Guacamole
Improper Privilege Management in Jenkins
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
Loop with Unreachable Exit Condition in Jenkins
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
Asset Pipeline Grails Plugin vulnerable to Path Traversal
Jenkins Configuration as Code Plugin has Insufficiently Protected Credentials
CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials
CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials
Improper authorization vulnerability in Jenkins Mesos Plugin
AWS CodeDeploy Plugin stored AWS Secret Key in plain text
Improper Authorization in Jenkins
Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin
Jenkins Perforce Plugin uses ineffective credentials encryption
Jenkins vSphere Plugin incorrect authorization vulnerability
Jenkins Subversion Plugin Incorrect Authorization vulnerability
Incorrect Authorization in Jenkins Mercurial Plugin
Weak Password Requirements in UnboundID LDAP SDK
RubyGems Infinite Loop vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.