Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 647
Plaintext storage in Jenkins instant-messaging Plugin
Missing permission check in Jenkins JiraTestResultReporter Plugin
Missing permission check in Jenkins RocketChat Notifier Plugin
XXE vulnerability in Jenkins Flaky Test Handler Plugin
Missing permission checks in Jekins Bitbucket Server Integration Plugin
Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
CSRF vulnerability in Proxmox Plugin
Missing permission checks in Jenkins Proxmox Plugin
Path traversal in Jenkins Phoenix AutoTest Plugin
Cross site request forgery in Jenkins Job and Node ownership Plugin
enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability
Cross-site Scripting in Jenkins SiteMonitor Plugin
CSRF vulnerability in Jenkins Job and Node ownership Plugin
Missing permission check in Jenkins Job and Node ownership Plugin
Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin
Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin
Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin
Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin
Missing permission Jenkins Pipeline Phoenix AutoTest Plugin
Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin
Arbitrary file read vulnerability in Jenkins Tests Selector Plugin
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbit
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.