Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtrosPath traversal vulnerability on Windows in Jenkins
Improper handling of equivalent directory names on Windows in Jenkins
Password stored in plain text by Jenkins Nomad Plugin
Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs
Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate
Liferay Portal and Liferay DXP insecure default configuration
Liferay Portal and Liferay DXP Stores User Passwords in Cleartext
Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions
Liferay Portal and Liferay DXP Fails to Properly Check User Permissions
Improper Privilege Management in Neo4j Graph Database
Generation of Error Message Containing Sensitive Information in Elasticsearch
Improper permission checks allow canceling queue items and aborting builds in Jenkins
CSRF vulnerabilities in Jenkins requests-plugin Plugin
Session fixation vulnerability in Jenkins
Missing permission check in Jenkins requests-plugin Plugin allows sending emails
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials
Liferay Portal and Liferay DXP Fails to Check Permissions
Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
View name validation bypass in Jenkins
Lack of type validation in agent related REST API in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.