Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtrosPasswords transmitted in plain text by Jenkins Stash Branch Parameter Plugin
Reflected XSS vulnerability in Jenkins VncRecorder Plugin
CSRF vulnerability in Jenkins Fortify on Demand Plugin
Users with Overall/Read access could enumerate credentials IDs in Jenkins Fortify on Demand Plugin
Stored XSS vulnerability in Jenkins VncRecorder Plugin
Stored XSS vulnerability in Jenkins Sonargraph Integration Plugin
ActiveMQ Artemis has Insufficiently Protected Credentials
Wildfly Unsafe Deserialization Vulnerability
Deserialization of Untrusted Data in Spring Batch
Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution
Liferay Portal and Liferay DXP Fails to Sanitize API Data
CSRF vulnerability in Jenkins Swarm Plugin
Missing permission check in Jenkins Project Inheritance Plugin
OS command injection vulnerability in Jenkins Play Framework Plugin
XSS vulnerability in Jenkins Subversion Partial Release Manager Plugin
Missing permission check in Jenkins Project Inheritance Plugin
Improper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin
Improper permission checks in Jenkins Swarm Plugin
Stored XSS vulnerability in Jenkins Compact Columns Plugin
Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection
Stored XSS vulnerability in Jenkins ECharts API Plugin
Stored XSS vulnerability in Jenkins ECharts API Plugin
WSO2 API Manager vulnerable to SSRF
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.