Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtrosPasswords transmitted in plain text by Jenkins ReadyAPI Functional Testing Plugin
Credentials stored in plain text by Jenkins tfs Plugin
Secret stored in plain text by Jenkins Parameterized Remote Trigger Plugin
Maven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted Data
Improper privilege management in elasticsearch
CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
CSRF vulnerability in Jenkins Flaky Test Handler Plugin
Jenkins Cross-site Scripting vulnerability in project naming strategy
Improper Neutralization of Input During Web Page Generation in Jenkins
Jenkins Email Extension Plugin SMTP password transmitted and displayed in plain text
Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
Jenkins Cross-Site Scripting vulnerability in help icons
Wildfly EJB Client causes DoS
Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection
Stored XSS vulnerability in Jenkins 'keep forever' badge icon
Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
Stored XSS vulnerability in Jenkins upstream cause
Stored XSS vulnerability in Jenkins job build time trend
Stored XSS vulnerability in Jenkins console links
Stored XSS vulnerability in Jenkins Link Column Plugin
Password stored in plain text by Jenkins HP ALM Quality Center Plugin
Content-Security-Policy protection for user content disabled by Jenkins ZAP Pipeline Plugin
Secret stored in plain text by Jenkins Slack Upload Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.