Media
CVE-2020-25815
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Media
CVE-2020-25814
MediaWiki Cross-site Scripting (XSS) vulnerability
Media
CVE-2020-25828
MediaWiki Cross-site Scripting (XSS) vulnerability
Alta
CVE-2020-25827
OATHAuth extension in MediaWiki is not implementing rate limit
Media
CVE-2020-25812
MediaWiki Cross-site Scripting (XSS) vulnerability
Media
CVE-2020-15840
Liferay Portal and Liferay DXP Bypass via Double Encoded URL
Alta
CVE-2020-2284
XXE vulnerability in Jenkins Liquibase Runner Plugin
Media
CVE-2020-2281
CSRF vulnerability in Jenkins Lockable Resources Plugin
Media
CVE-2020-2283
Stored XSS vulnerability in Jenkins Liquibase Runner Plugin
Crítica
CVE-2020-2279
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Media
CVE-2020-2282
Missing permission check in Jenkins Implied Labels Plugin allows reconfiguring the plugin
Media
CVE-2020-2285
Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs
Alta
CVE-2020-2280
CSRF vulnerability in Jenkins warnings Plugin allows remote code execution
Baja
CVE-2020-7734
All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.
Alta
CVE-2020-25750
DotPlant2 Improper Restriction of XML External Entity Reference
Media
CVE-2020-2273
CSRF vulnerability in Jenkins ElasTest Plugin
Media
CVE-2020-2274
Passwords stored in plain text by ElasTest Plugin
Media
CVE-2020-2272
Missing permission checks in Jenkins ElasTest Plugin
Media
CVE-2020-2277
Arbitrary file read vulnerability in Jenkins Storable Configs Plugin
Media
CVE-2020-2278
Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
Alta
CVE-2020-2276
System command execution vulnerability in Selection tasks Jenkins Plugin
Media
CVE-2020-2275
Arbitrary file read vulnerability in Copy data to workspace Jenkins Plugin
Alta
CVE-2020-2271
Stored XSS vulnerability in Locked Files Report Plugin
Media
CVE-2020-2268
CSRF vulnerability in MongoDB Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.