Alta
CVE-2023-28678
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2023-28671
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
Alta
CVE-2023-28676
Jenkins Convert To Pipeline Plugin vulnerable to cross-site request forgery
Alta
CVE-2023-28669
Jenkins JaCoCo Plugin vulnerable to Stored Cross-site Scripting
Media
CVE-2023-28668
Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled
Alta
CVE-2023-28677
Jenkins Convert To Pipeline Plugin vulnerable to command injection
Media
CVE-2023-28675
Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections
Media
CVE-2023-28672
Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture
Alta
CVE-2023-28681
Jenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-28680
Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-28679
Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting
Media
CVE-2023-28674
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
Media
CVE-2023-28673
Jenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumeration
Alta
CVE-2023-28670
Jenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting
Alta
CVE-2023-28683
Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-28684
Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks
Alta
CVE-2023-28682
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
Alta
CVE-2023-27025
RuoYi vulnerable to arbitrary file download
Alta
ghsa-5x5q-8cgm-2hjq
Karate has vulnerable dependency on json-smart package (CVE-2023-1370)
Crítica
CVE-2023-27162
OpenAPI Generator vulnerable to Server-Side Request Forgery
Crítica
CVE-2023-1784
jeecg-boot vulnerable to improper authentication
Crítica
CVE-2023-1741
jeecg-boot vulnerable to SQL injection
Crítica
CVE-2023-28462
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
Alta
CVE-2023-28935
Apache UIMA DUCC allows remote code execution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.