Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtrosLiferay Portal is vulnerable to DNS rebinding attacks
Liferay Portal vulnerable to password enumeration
Jenkins Publish to Bitbucket Plugin is missing a permissions check
Jenkins Curseforge Publisher Plugin does not mask API Keys displayed on the job configuration form
Jenkins Publish to Bitbucket Plugin is missing a permissions check
Jenkins Publish to Bitbucket Plugin vulnerable to CSRF and missing permissions check
Jenkins Curseforge Publisher Plugin stores API Keys unencrypted in job config.xml files
Jenkins Themis Plugin is missing a permission check
Jenkins ByteGuard Build Actions Plugin stores API tokens unencrypted in job config.xml files
Jenkins Start Windocks Containers Plugin is missing a permission check
Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery
Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml files
Jenkins Eggplant Runner Plugin protection mechanism disabled
Jenkins Azure CLI Plugin does not restrict the commands it executes
Jenkins Nexus Task Runner Plugin is missing a permission check
Jenkins Nexus Task Runner Plugin vulnerable to cross-site request forgery
Jenkins Themis Plugin vulnerable to cross-site request forgery
Jenkins SAML Plugin does not implement a replay cache
Jenkins JDepend Plugin vulnerable to XML external entity attacks
Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools
Jenkins ByteGuard Build Actions Plugin does not mask API tokens displayed on the job configuration form
Jenkins Extensible Choice Parameter Plugin vulnerable to cross-site request forgery
InventoryGui allows item duplication in GUIs which use GuiStorageElement
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.