Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtrosJenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization
Jenkins Fortify on Demand Plugin stores credentials in plain text
Jenkins View26 Test-Reporting Plugin stores access token in plain text
Jenkins SOASTA CloudTest Plugin stores API token in plain text
Jenkins Sofy.AI Plugin stores API token in plain text
Missing permission checks in Google Kubernetes Engine Jenkins Plugin
Improper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin
Jenkins CRX Content Package Deployer Plugin subject to Missing Authorization
Jenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery
Jenkins LDAP Email Plugin shows plain text password in configuration form
DingTalk Plugin stores credentials in plain text
Jenkins SourceGear Vault plugin transmits credentials in plain text
Cleartext Transmission of Sensitive Information in Apache MINA
Jenkins Git Changelog Plugin has Insufficiently Protected Credentials
Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Jenkins Inedo BuildMaster Plugin showed plain text password in configuration form
Jenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive Information
Jenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials
Cross-site Scripting in Apache JSPWiki
Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields
Mule modules contain Directory Traversal
Improper Neutralization of Input During Web Page Generation in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.