Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.609
GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior
Prototype Pollution in realms-shim
PHP Everywhere <= 2.0.2 - Cross-Site Request Forgery
Cross-Site Request Forgery in Jenkins Mailer Plugin
Incorrect Permission Assignment for Critical Resource in Jenkins Mailer Plugin
Stored XSS vulnerability in Matrix Project Plugin
Incorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding Plugin
OS command execution vulnerability in Jenkins Docker Commons Plugin
Incorrect Permission Assignment for Critical Resource in Jenkins Bitbucket Branch Source Plugin
Cross-Site Request Forgery in Jenkins Bitbucket Branch Source Plugin
Missing permission checks in SSH Agent Plugin allow enumerating credentials IDs
Access key stored in plain text by Jenkins Metrics Plugin
User passwords transmitted in plain text by Jenkins Active Directory Plugin
Improper credentials masking in Jenkins HashiCorp Vault Plugin
Stored XSS vulnerability in Jenkins Badge Plugin
Stored XSS vulnerability in Jenkins Publish Over SSH Plugin
Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows retrieving all credentials
Missing permission check in Jenkins Publish Over SSH Plugin
CSRF vulnerability and missing permission checks in Jenkins Publish Over SSH Plugin
Path traversal vulnerability in Jenkins Publish Over SSH Plugin
Password stored in plain text by Jenkins Publish Over SSH Plugin
CSRF vulnerability in Jenkins batch task Plugin
Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.