Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.647
Plaintext storage in Jenkins instant-messaging Plugin
Missing permission check in Jenkins JiraTestResultReporter Plugin
Missing permission check in Jenkins RocketChat Notifier Plugin
XXE vulnerability in Jenkins Flaky Test Handler Plugin
Missing permission checks in Jekins Bitbucket Server Integration Plugin
Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
CSRF vulnerability in Proxmox Plugin
Missing permission checks in Jenkins Proxmox Plugin
Path traversal in Jenkins Phoenix AutoTest Plugin
Cross site request forgery in Jenkins Job and Node ownership Plugin
enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability
Cross-site Scripting in Jenkins SiteMonitor Plugin
CSRF vulnerability in Jenkins Job and Node ownership Plugin
Missing permission check in Jenkins Job and Node ownership Plugin
Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin
Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin
Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin
Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin
Missing permission Jenkins Pipeline Phoenix AutoTest Plugin
Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin
Arbitrary file read vulnerability in Jenkins Tests Selector Plugin
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbit
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.