Alta
CVE-2017-1000483
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.728
Media
CVE-2017-1000424
Electron vulnerable to URL spoofing via PDFium
Alta
CVE-2017-1000403
Arbitrary code execution vulnerability in Jenkins Speaks! Plugin
Alta
CVE-2017-1000387
Jenkins Build-Publisher plugin has Insufficiently Protected Credentials
Alta
CVE-2017-1000451
fs-git command injection vulnerability
Alta
CVE-2017-1000361
OpenDaylight Controller DoS
Media
CVE-2017-1000360
OpenDaylight NULL Pointer Dereference
Crítica
CVE-2017-1000245
Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext
Crítica
CVE-2017-1000220
PIDUsage Enables OS Command Injection
Media
CVE-2017-1000221
Opencast has Incorrect Permission Assignment
Alta
CVE-2017-1000107
Sandbox bypass in Jenkins Script Security Plugin sandbox bypass
Alta
CVE-2017-1000106
Improper Authentication in Jenkins Blue Ocean Plugin
Media
CVE-2017-1000104
Improper Privilege Management in Jenkins Config File Provider Plugin
Media
CVE-2017-1000084
Parameterized Trigger Plugin fails to check Item/Build permission
Media
CVE-2017-1000110
Improper Authentication in Jenkins Blue Ocean Plugin
Crítica
CVE-2017-1000116
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.
Alta
CVE-2017-1000096
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
Media
CVE-2017-1000095
Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin
Media
CVE-2017-1000089
Jenkins Build Step Plugin fails to check Item/Build permission
Alta
CVE-2017-1000046
Sensitive Cookie Without HttpOnly and Secure Flag
Media
CVE-2017-0360
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerabili
Crítica
CVE-2018-7251
Anchor CMS Logs Credentials
Media
CVE-2018-7274
Yab Quarx persistent cross-site scripting vulnerability
Baja
CVE-2011-1483
JBossWS vulnerable to uncontrolled recursion
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.