Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtrosJenkins buildgraph-view Plugin vulnerable to stored Cross-site Scripting
Improper Certificate Validation in Jenkins Spira Importer Plugin
Missing permission check in Jenkins Gerrit Trigger Plugin
Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin
Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin
Jenkins Maven Release Plug-in Plugin XXE vulnerability
Cross-Site Request Forgery in Jenkins Build Failure Analyzer Plugin
Keycloak Authentication Error
Keycloak Authentication Error
Use of Externally-Controlled Input to Select Classes or Code in Infinispan
Plaintext Storage in Jenkins Spira Importer Plugin
Jenkins QMetry for JIRA Plugin shows plain text password in configuration form
Jenkins Support Core Plugin allowed users with Overall/Read permission to delete arbitrary files
Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability
Jenkins QMetry for JIRA Plugin stored credentials in plain text
Jenkins Google Compute Engine Plugin Missing Authorization vulnerability
Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin
Missing permission check in Jenkins Support Core Plugin
Jenkins JIRA Plugin allows users to select and use credentials with System scope
Incorrect Authorization in Jenkins Script Security Plugin
Jenkins Anchore Container Scanner Plugin vulnerable to Insufficiently Protected Credentials
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Loop with Unreachable Exit Condition in Apache Thrift
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.