Media
CVE-2026-53438
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 259
Restablecer filtros
Media
CVE-2026-53442
Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations
Media
CVE-2026-53437
Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL
Media
CVE-2026-53436
Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
Media
CVE-2026-53439
Jenkins exposes other users' timezone and view names to users with Overall/Read permission
Alta
CVE-2026-53435
Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation
Media
CVE-2026-53440
Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"
Alta
CVE-2026-53441
Jenkins: Stored XSS vulnerability in node offline cause description
Alta
CVE-2026-33001
Jenkins has a link following vulnerability allows arbitrary file creation
Alta
CVE-2026-33002
Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation
Media
CVE-2026-27100
Jenkins has a build information disclosure vulnerability through Run Parameter
Alta
CVE-2026-27099
Jenkins has a stored XSS vulnerability in node offline cause description
Media
CVE-2025-67636
Jenkins is missing a permission check on password fields
Media
CVE-2025-67637
Jenkins's build authorization token is stored and displayed in plain text
Media
CVE-2025-67638
Jenkins's build authorization token is stored and displayed in plain text
Alta
CVE-2025-67635
Jenkins has a Denial of service vulnerability in HTTP-based CLI
Baja
CVE-2025-67639
Jenkins has a CSRF vulnerability on the login form
Media
CVE-2025-59476
Jenkins has a log message injection vulnerability
Media
CVE-2025-59474
Jenkins has a missing permission check, allowing users to obtain agent names
Media
CVE-2025-59475
Jenkins is missing a permission check in the authenticated users' profile menu
Media
CVE-2025-31721
Jenkins Missing Permission Check
Media
CVE-2025-31720
Jenkins Missing Permission Check
Media
CVE-2025-27624
Jenkins cross-site request forgery (CSRF) vulnerability
Media
CVE-2025-27625
Jenkins Open Redirect vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.