Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Jenkins Team Concert Plugin missing permission check
Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgery
Jenkins RapidDeploy Plugin missing permission check
Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin
Cross site scripting in Jenkins Mission Control Plugin
Jenkins Redgate SQL Change Automation Plugin has Insufficiently Protected Credentials
Jenkins Team Concert Plugin cross-site request forgery vulnerability
Jenkins Rundeck Plugin stored credentials in plain text
SSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin
Missing permission check in Jenkins Build Failure Analyzer Plugin
Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin
Inefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin
Jenkins WebSphere Deployer Plugin missing permission check
Jenkins buildgraph-view Plugin vulnerable to stored Cross-site Scripting
Improper Certificate Validation in Jenkins Spira Importer Plugin
Missing permission check in Jenkins Gerrit Trigger Plugin
Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin
Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin
Jenkins Maven Release Plug-in Plugin XXE vulnerability
Cross-Site Request Forgery in Jenkins Build Failure Analyzer Plugin
Possible to circumvent title-blacklist
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service
OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enforc
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.