Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtrosNetty denial of service vulnerability
Loop with Unreachable Exit Condition in Apache PDFBox
Apache Sentry may allow attacker to access/remove data from Sentry protected table
Missing Authentication for Critical Function in Apache Cassandra
Improper Privilege Management in MySQL Connectors Java
Incorrect Authorization in Jenkins
Exposure of Sensitive Information in Jenkins Kubernetes Plugin
Jenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build log
Jenkins Agiletestware Pangolin Connector for TestRail Plugin CSRF vulnerability and missing permission checks
Infinite Loop in Jenkins Core
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checks
Jenkins Accurev Plugin CSRF vulnerability and missing permission checks
Missing Release of Resource after Effective Lifetime in Jenkins
Missing Encryption of Sensitive Data in Apache Guacamole
OpenTSDB vulnerable to OS Command Injection
Missing certificate validation in Apache JMeter
Missing certificate validation in Apache JMeter
Apache OpenMeetings may allow authenticated attacker to deny service for privileged users
Cloud Foundry UAA accepts refresh token as access token on admin endpoints
Improper Privilege Management in Jenkins
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
Loop with Unreachable Exit Condition in Jenkins
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.