Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 3.281
Restablecer filtrosCross-Site Request Forgery in Jenkins
Improper Authentication in Jenkins
Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin
Path Traversal in Apache Oozie
Apache James Hupa Webmail application Cross-site Scripting Vulnerabilities
Apache Geode configuration request authorization vulnerability
Apache Geode unsafe deserialization of application objects
Apache Geode unsafe deserialization in TcpServer
Deserialization of Untrusted Data in Apache OpenJPA
WildFly has incomplete blacklist vulnerability
Jenkins Perforce Plugin exposure of sensitive information vulnerability exists
Jenkins Reverse Proxy Auth Plugin allows attackers with local file system access to obtain a list of authorities for logged in users
Jenkins GitHub Pull Request Builder Plugin
Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials
Jenkins vSphere Plugin Cross-Site Request Forgery vulnerability
Jenkins Email Extension Plugin showed plain text SMTP password in configuration form field
Stored XSS vulnerability in Jenkins S3 Publisher Plugin
Special top object can be used to access Struts' internals
Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability
Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
Exposure of Sensitive Information in Jenkins Kubernetes Plugin
Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text
Exposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.