Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Path traversal in Jenkins REPO Plugin
Missing Authorization in Jenkins SSH plugin
Cross Site Request Forgery in Jenkins SSH Plugin
Missing permission check in Jenkins SSH Plugin
Cross-site Scripting in Jenkins Rundeck Plugin
Missing Authorization in Jenkins WMI Windows Agents plugin
Path traversal in Jenkins Git Mercurial and Repo Plugins
Buffer overflow in Jenkins WMI Windows Agents plugin
Path traversal in Jenkins Mercurial Plugin
CSRF vulnerability in Jenkins Script Security Plugin
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin
JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service
Log WP_Mail <= 0.1 - Sensitive Information Disclosure
Second Street <= 3.1.6 - Stored Cross-Site Scripting via organization_id
Event Management, Events Calendar, RSVP Event Tickets Plugin <= 3.8.4 - Cross-Site Scripting
Email Users <= 4.8.8 - Arbitrary Settings Update via Cross-Site Request Forgery
Carousel CK <= 1.1.0 - Authenticated (Admin+) Cross-Site Scripting
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
Jupiter Theme <= 6.10.1 - Authenticated Arbitrary Plugin Deletion
Quick Subscribe <= 1.7.1 - Cross-Site Request Forgery to Arbitrary Settings Update and Stored Cross-Site Scripting
Slideshow CK <= 1.4.9 - Authenticated Stored Cross-Site Scripting
HC Custom WP-Admin URL <= 1.4 - Cross-Site Request Forgery
HC Custom WP-Admin URL <= 1.4 - Information Exposure
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.