Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
MediaWiki information disclosure
SilverStripe asset-admin Cross-site Scripting (XSS)
Jenkins Google Calendar Plugin has Insufficiently Protected Credentials
Jenkins elOyente Plugin has Insufficiently Protected Credentials
Silverstripe Flash Clipboard Reflected XSS
Jenkins CodeScan Plugin has Insufficiently Protected Credentials
Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin
Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin
Jenkins Git Changelog Plugin has Insufficiently Protected Credentials
Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Violation Comments to GitLab Plugin has Insufficiently Protected Credentials
Jenkins Call Remote Job Plugin has Insufficiently Protected Credentials
Jenkins Azure Event Grid Build Notifier Plugin has Insufficiently Protected Credentials
Jenkins Assembla Plugin has Insufficiently Protected Credentials
Jenkins vFabric Application Director Plugin Insufficiently Protected Credentials
Jenkins Inedo BuildMaster Plugin showed plain text password in configuration form
Missing permission check in Jenkins Project Inheritance Plugin
Jenkins Inedo ProGet Plugin Plugin has Cleartext Transmission of Sensitive Information
Jenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials
Jenkins Log Parser Plugin vulnerable to Cross-site Scripting
Jenkins Project Inheritance Plugin vulnerable to Cross-Site Request Forgery
Yii Framework Code Injection
Joomla! XSS in Default Templates
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.