Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Jenkins Open STF Plugin stores credentials in plain text
Cisco node-jose improper validation of JWT signature
Incorrect Authorization in Jenkins Core
Code injection in Apache Struts
MantisBT allows arbitrary password reset
Jenkins Script Security Plugin sandbox bypass vulnerability
Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
Jenkins Cloud Foundry Plugin vulnerable to exposure of sensitive information
Jenkins Groovy Plugin sandbox bypass vulnerability
Jenkins Pipeline Declarative Plugin sandbox bypass vulnerability
Jenkins Groovy Plugin sandbox bypass vulnerability
Protection Mechanism Failure in Jenkins Script Security Plugin
Jenkins PRQA Plugin stored password in plain text
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Jenkins AppDynamics Dashboard Plugin has insufficiently protected credentials
Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin
Missing permission check in Azure VM Agents Plugin allowed modifying VM configuration
SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin
ECS Publisher Plugin stored and displayed API token in plain text
Jenkins Slack Notification Plugin missing permission check
Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin
Script security sandbox bypass in Jenkins Job DSL Plugin
Script security sandbox bypass in Matrix Project Plugin
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.