Crítica
CVE-2020-8441
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Media
CVE-2020-2131
Passwords stored in plain text by Harvest SCM Plugin
Media
CVE-2020-2130
Passwords stored in plain text by Harvest SCM Plugin
Media
CVE-2020-2133
Password stored in plain text by Applatix Plugin
Baja
CVE-2020-2126
Token stored in plain text by DigitalOcean Plugin
Baja
CVE-2020-2127
Credential stored in plain text by BMC Release Package and Deployment Plugin
Media
CVE-2020-2128
Password stored in plain text by ECX Copy Data Management Plugin
Baja
CVE-2020-2125
Credentials stored in plain text by debian-package-builder Plugin
Alta
CVE-2020-2120
XXE vulnerability in FitNesse Plugin
Media
CVE-2020-2124
Password stored in plain text by Dynamic Extended Choice Parameter Plugin
Media
CVE-2020-2132
Password stored in plain text by Parasoft Environment Manager Plugin
Alta
CVE-2020-2123
RCE vulnerability in RadarGun Plugin
Media
CVE-2020-2129
Plaintext Storage of a Password in Jenkins Eagle Tester Plugin
Media
CVE-2020-2122
Stored XSS vulnerability in Jenkins brakeman Plugin
Alta
CVE-2020-2121
RCE vulnerability in Google Kubernetes Engine Plugin
Alta
CVE-2020-2115
XXE vulnerability in NUnit Plugin
Alta
CVE-2020-2109
Improper Input Validation in Jenkins Pipeline: Groovy Plugin
Media
CVE-2020-2112
Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)
Media
CVE-2020-2111
Subversion Plugin stored XSS vulnerability
Baja
CVE-2020-2114
Jenkins S3 Publisher Plugin transmits credentials in plain text during configuration
Baja
CVE-2020-2119
Client secret transmitted in plain text by Azure AD Plugin
Media
CVE-2020-2113
Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)
Media
CVE-2020-2118
Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin
Alta
CVE-2020-2117
Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.