Media
CVE-2017-1000221
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Alta
CVE-2017-1000107
Sandbox bypass in Jenkins Script Security Plugin sandbox bypass
Alta
CVE-2017-1000106
Improper Authentication in Jenkins Blue Ocean Plugin
Media
CVE-2017-1000104
Improper Privilege Management in Jenkins Config File Provider Plugin
Media
CVE-2017-1000084
Parameterized Trigger Plugin fails to check Item/Build permission
Media
CVE-2017-1000110
Improper Authentication in Jenkins Blue Ocean Plugin
Crítica
CVE-2017-1000116
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.
Alta
CVE-2017-1000096
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
Media
CVE-2017-1000095
Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin
Media
CVE-2017-1000089
Jenkins Build Step Plugin fails to check Item/Build permission
Alta
CVE-2017-1000046
Sensitive Cookie Without HttpOnly and Secure Flag
Media
CVE-2017-0360
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerabili
Crítica
CVE-2018-7251
Anchor CMS Logs Credentials
Media
CVE-2018-7274
Yab Quarx persistent cross-site scripting vulnerability
Baja
CVE-2011-1483
JBossWS vulnerable to uncontrolled recursion
Alta
CVE-2016-0750
Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
Alta
CVE-2016-9589
Red Hat Wildfly DoS
Media
CVE-2017-1002152
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.
Media
CVE-2017-12158
Keycloak Reflected XSS
Alta
CVE-2017-12159
Keycloak CSRF Vulnerability
Alta
CVE-2017-12165
Undertow Request Smuggling vulnerability
Media
CVE-2017-12197
Improper Input Validation in libpam4j
Media
CVE-2017-12196
Incorrect Authorization in Undertow
Media
CVE-2017-2602
Incomplete List of Disallowed Inputs in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.