Media
CVE-2023-32982
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.602
Restablecer filtros
Baja
CVE-2023-33000
Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
Media
CVE-2023-32990
Jenkins Azure VM Agents Plugin missing permission checks
Media
CVE-2023-32978
Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
Media
CVE-2023-32989
Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
Media
CVE-2023-2632
Jenkins Code Dx Plugin stores API keys in plain text
Alta
CVE-2023-32992
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Media
CVE-2023-32987
Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability
Alta
CVE-2023-32991
Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
Media
CVE-2023-2633
Jenkins Code Dx Plugin displays API keys in plain text
Media
CVE-2023-32983
Jenkins Ansible Plugin job configuration form does not mask variables
Media
CVE-2023-32081
Vert.x STOMP server process client frames that would not send initially a connect frame
Crítica
CVE-2023-31126
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
Crítica
CVE-2023-30331
Server-side template injection in beetl
Alta
CVE-2023-29517
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer
Media
CVE-2023-29513
xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro
Crítica
CVE-2023-29528
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
Media
CVE-2023-26048
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Baja
CVE-2023-26049
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
Alta
CVE-2023-30535
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Crítica
CVE-2023-29201
org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
Media
CVE-2023-30518
Jenkins Thycotic Secret Server Plugin missing permissions check
Media
CVE-2023-30517
Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation
Media
CVE-2023-30524
Jenkins Report Portal Plugin configuration form does not mask tokens
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.