CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- jenkins assembla, jenkins project assembla plugin +1 moreJenkins Assembla Plugin has a missing permission check5.4 Medium
- jenkins assembla, jenkins project assembla plugin +1 moreJenkins Assembla Plugin has an XXE vulnerability7.1 High
- jenkins fitnesse, jenkins project fitnesse plugin +1 moreJenkins FitNesse Plugin stores passwords unencrypted4.3 Medium
- jenkins project owasp zap plugin, jenkins official owasp zap +1 moreJenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE8.8 High
- jenkins mcp server, jenkins project mcp server plugin +1 moreJenkins MCP Server Plugin missing a permission check4.3 Medium
- jenkins contrast continuous application security, jenkins project contrast continuous application security plugin +1 moreJenkins Contrast Continuous Application Security Plugin missing permission checks4.3 Medium
- jenkins project contrast continuous application security pluginJenkins Contrast Continuous Application Security Plugin has a CSRF vulnerability5.4 Medium
- jenkins contrast continuous application security, jenkins project contrast continuous application security plugin +1 moreJenkins Contrast Continuous Application Security Plugin has a missing permission check4.3 Medium
- jenkins project external workspace manager pluginJenkins External Workspace Manager Plugin has a path traversal vulnerability8.8 High
- jenkins ec2 fleet, jenkins project ec2 fleet plugin +1 moreJenkins EC2 Fleet Plugin has a cross-site request forgery (CSRF) vulnerability5.4 Medium
- jenkins ec2 fleet, jenkins project ec2 fleet plugin +1 moreJenkins EC2 Fleet Plugin has a missing permission check5.4 Medium
- jenkins project gitee pluginJenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs4.3 Medium
- jenkins project gitee pluginJenkins Gitee Plugin has a cross-site request forgery vulnerability5.4 Medium
- jenkins project gitee pluginJenkins Gitee Plugin missing permission checks5.4 Medium
- jenkins priority sorter, jenkins project priority sorter plugin +1 moreJenkins Priority Sorter Plugin has a CSRF vulnerability4.3 Medium
- jenkins bitbucket push and pull request, jenkins project bitbucket push and pull request plugin +1 moreJenkins Bitbucket Push and Pull Request Plugin unconditionally disables SSL/TLS certificate validation4.8 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin has an LDAP injection vulnerability3.7 Low
- jenkins job configuration history, jenkins project job configuration history plugin +1 moreJenkins Job Configuration History Plugin doesn't redact encrypted values of secrets in job and agent configurations4.3 Medium
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin has a missing permission check that allows listing SCM branch and tag names4.3 Medium
- jenkins github branch source, jenkins project github branch source plugin +1 moreJenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs4.3 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of types4.3 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Plugin has a CSRF vulnerability4.3 Medium
- jenkins git client, jenkins project git client plugin +1 moreJenkins Git client Plugin has an OS command injection vulnerability on agents5.0 Medium
- jenkins script security, jenkins project script security plugin, red hat openshift developer tools and services +11 more +13 moreJenkins Script Security Plugin has a script security bypass vulnerability7.5 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin sandbox bypass vulnerability8.8 High
- mailerupLack of input validation in Mailerup input parameter leads to Open Redirect5.3 Medium
- adegans adrotate banner managerAdRotate Banner Manager <= 5.17.7 - Authenticated (Contributor+) PHP Code Injection via 'banner' Shortcode Attribute8.8 High
- bytecodealliance wasmtimeWasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination6.5 Medium
- cap-go capgoCapgo - Denial of Service in 2FA Email Verification via /auth/v1/otp Endpoint6.9 Medium
- cap-go capgoCapgo - Information Disclosure via Unauthenticated RPC Function exist_app_v26.9 Medium
- cap-go capgoCap-go - Authorization Bypass in Organization Members Endpoint via API Key Scope Bypass5.3 Medium
- cap-go capgoCapgo - Unsecured Supabase Images Bucket via Missing Row Level Security6.9 Medium
- cap-go capgoCapgo - Authorization Bypass in App Ownership Transfer via Direct PostgREST Update7.1 High
- cap-go capgoCapgo - Two-Factor Authentication Bypass via Organization Management API7.1 High
- cap-go capgoSupabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPC8.8 High
- cap-go capgoCapgo - Webhook Signing Secret Disclosure via Non-Admin API Key7.1 High
- cap-go capgoCapgo - Unauthenticated API Key Generation via Client-Side Parameter Manipulation9.3 Critical
- cap-go capgoCapgo - Subkey Scope Bypass in middlewareKey via x-limited-key-id Header8.7 High
- cap-go capgoCapgo - Broken Object Level Authorization in Build Job Control via jobId Parameter7.2 High
- cap-go capgoCapgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-user9.3 Critical
- thinkst canarytokensStored Cross-Site Scripting in Canarytokens.org1.1 Low
- pentestifySSRF in Pentestify PDF generation endpoint via Host header6.9 Medium
- linux, linux kernel +1 moreksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE5.5 Medium
- open source tortoisegitImproper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGit5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +10 more +12 morenet: skbuff: fix missing zerocopy reference in pskb_carve helpers7.8 High
sg3_utilsSUSESecurity update for sg3_utilsNo score- upkeeper solutions instant privilege accessImproper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant...7.9 High
- curlSSH improper host validation7.4 High
- curlsending old referer7.5 High
- curlexposing HTTP/3 early data7.5 High
- Show moreLoading…