Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 546
Restablecer filtrosMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins
Exposure of Resource to Wrong Sphere in Spring Cloud OpenFeign
Jenkins SAML Plugin allows bypassing CSRF protection for any URL
Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL
Password stored in plain text by Jenkins Nomad Plugin
XSS vulnerability in Jenkins Markdown Formatter Plugin
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin
Path traversal vulnerability in Jenkins agent names
Improper Authentication in Jenkins Active Directory Plugin
Missing permission checks in Jenkins Maven Cascade Release Plugin
CSRF vulnerability in Jenkins Maven Cascade Release Plugin
Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin
Missing hostname validation in Email Extension Plugin
Improper Neutralization of Input During Web Page Generation in Jenkins
Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection
Improper masking of some secrets in Jenkins Credentials Binding Plugin
Improper Verification of Cryptographic Signature in Apache Netbeans
Cross-Site Request Forgery in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.