Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 49
Restablecer filtrosJenkins Gitee Plugin has a cross-site request forgery vulnerability
Jenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs
Jenkins Git client Plugin has an OS command injection vulnerability on agents
Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs
Jenkins GitHub Integration Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test
Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin
Jenkins Git client Plugin file system information disclosure vulnerability
Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
Jenkins Git server Plugin does not perform a permission check
Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting
Arbitrary file read vulnerability in Git server Plugin can lead to RCE
CSRF vulnerability in GitLab Authentication Plugin
Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin
Jenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive Information
Non-constant time webhook token comparison in Jenkins GitLab Plugin
Improper masking of credentials Jenkins in Git Plugin
Lack of authentication mechanism in Jenkins Git Plugin webhook
Lack of authentication mechanism in Jenkins Git Plugin webhook
Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
Lack of authentication mechanism in Jenkins Git Plugin webhook
Cross-site Scripting in Jenkins GitLab Plugin
Jenkins GitLab Logo Plugin stores credentials unencrypted
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.