Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.690
Jenkins improperly ensures trust separation
Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs
Jenkins allows for Code Execution via Crafted Packet to the CLI
Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation
Jenkins allows for Privilege Escalation by Remote Authenticated Users
Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code
Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Jenkins allows Cross-Site Scripting (XSS)
Jenkins allows for Privilege Escalation by Remote Authenticated Users
Jenkins Vulnerable to Denial of Service (DoS)
Jenkins Cross-site Scripting vulnerability
Liferay Portal Vulnerable to XSS in Profile Search Functionality
Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified Pages
Jenkins Monitoring Plugin allows Cross-Site Scripting (XSS)
Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS)
Jenkins Exclusion Plugin allows Access to Resource Locks
Jenkins Cross-Site Request Forgery vulnerabilities
Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject arbit
Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML vi
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
OpenStack Murano Code Execution
Apache Jackrabbit Authentication Hijacking Vulnerability
Drupal Users without "Administer comments" can set comment visibility on nodes they can edit
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.