Media
CVE-2020-2118
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 191
Restablecer filtros
Alta
CVE-2020-2117
Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials
Alta
CVE-2020-2116
CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials
Media
CVE-2019-16574
Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins
Media
CVE-2019-16564
Jenkins Pipeline Aggregator View Plugin stored XSS vulnerability
Alta
CVE-2019-16573
Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgery
Crítica
CVE-2019-10458
Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin
Crítica
CVE-2019-10417
Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin
Crítica
CVE-2019-10418
Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin
Alta
CVE-2019-10380
Jenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerability
Media
CVE-2019-10373
Jenkins Build Pipeline Plugin vulnerable to Cross-site Scripting
Media
CVE-2019-10357
Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin
Media
CVE-2022-30952
Insufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin
Baja
CVE-2022-30949
Path traversal in Jenkins REPO Plugin
Media
CVE-2022-30951
Missing Authorization in Jenkins WMI Windows Agents plugin
Alta
CVE-2022-30947
Path traversal in Jenkins Git Mercurial and Repo Plugins
Media
CVE-2022-30950
Buffer overflow in Jenkins WMI Windows Agents plugin
Baja
CVE-2022-30948
Path traversal in Jenkins Mercurial Plugin
Alta
CVE-2022-30945
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin
Media
CVE-2011-1475
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
Alta
CVE-2017-1000108
Jenkins Pipeline: Input Step Plugin
Media
CVE-2017-1000404
Jenkins Delivery Pipeline Plugin Cross-site Scripting vulnerability
Alta
CVE-2018-1000058
Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin
Alta
CVE-2018-17605
Asset Pipeline plugin for Grails vulnerable to Path Traversal
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.