jenkins-2-plugins vulnerabilities (Red Hat)
304 vulnerabilities.
jenkins-2-pluginsRed HatIncorrect Privilege Assignment in Jenkins Script Security Plugin8.8 Highjenkins-2-pluginsRed HatImproper Restriction of XML External Entity Reference Jenkins Token Macro Plugin7.5 Highjenkins-2-pluginsRed HatUnsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin9.9 Criticaljenkins-2-pluginsRed HatInsertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin4.3 Mediumjenkins-2-pluginsRed HatXSS in jQuery as used in Drupal, Backdrop CMS, and other products6.1 Mediumjenkins-2-pluginsRed HatImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Mediumjenkins-2-pluginsRed HatInsufficient Session Expiration in Jenkins8.1 Highjenkins-2-pluginsRed HatWithdrawn Advisory: OpenShift OAuth Server XSS Vulnerability5.0 Mediumjenkins-2-pluginsRed HatKubernetes DoS Vulnerability6.5 Mediumjenkins-2-pluginsRed HatJenkins Lockable Resources Plugin XSS vulnerability5.4 Mediumjenkins-2-pluginsRed HatSandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin9.8 Criticaljenkins-2-pluginsRed HatSandbox bypass vulnerability in Jenkins Script Security Plugin9.8 Criticaljenkins-2-pluginsRed HatWithdrawn Advisory: Prometheus XSS Vulnerability6.1 Mediumjenkins-2-pluginsRed HatScript security sandbox bypass in Jenkins Job DSL Plugin9.9 Criticaljenkins-2-pluginsRed HatScript security sandbox bypass in Matrix Project Plugin9.9 Criticaljenkins-2-pluginsRed HatSandbox bypass in Jenkins Pipeline: Groovy Plugin9.9 Criticaljenkins-2-pluginsRed HatSandbox bypass in Script Security Plugin9.9 Criticaljenkins-2-pluginsRed HatJenkins Script Security Plugin sandbox bypass vulnerability8.8 Highjenkins-2-pluginsRed HatJenkins Config File Provider Plugin XSS vulnerability4.8 Mediumjenkins-2-pluginsRed HatCross-site Scripting in Jenkins Blue Ocean Plugin5.4 Mediumjenkins-2-pluginsRed HatCross-Site Request Forgery in Jenkins Blue Ocean Plugin6.5 Mediumjenkins-2-pluginsRed HatJenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS8.1 Highjenkins-2-pluginsRed HatCross-Site Request Forgery in Jenkins Git Plugin4.3 Mediumjenkins-2-pluginsRed HatSandbox Bypass in Script Security Plugin8.8 Highjenkins-2-pluginsRed HatImproper Limitation of a Pathname to a Restricted Directory in Jenkins6.5 Mediumjenkins-2-pluginsRed HatImproper Authorization in Jenkins Core7.2 Highjenkins-2-pluginsRed HatImproper Authorization in Jenkins Core7.2 Highjenkins-2-pluginsRed HatJenkins Pipeline Declarative Plugin sandbox bypass vulnerability8.8 Highjenkins-2-pluginsRed HatJenkins Groovy Plugin sandbox bypass vulnerability8.8 Highjenkins-2-pluginsRed HatProtection Mechanism Failure in Jenkins Script Security Plugin8.8 Highjenkins-2-pluginsRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins7.8 Highjenkins-2-pluginsRed HatSession Fixation in Jenkins5.4 Mediumjenkins-2-pluginsRed HatImproper Authorization in Jenkins6.5 Mediumjenkins-2-pluginsRed HatCross-site Scripting in Jenkins6.1 Mediumjenkins-2-pluginsRed HatPath Traversal in Jenkins6.5 Mediumjenkins-2-pluginsRed HatAn out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1...7.5 Highjenkins-2-pluginsRed HatKibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console...9.8 Criticaljenkins-2-pluginsRed HatAn issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...7.5 Highjenkins-2-pluginsRed HatAn out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8...7.5 Highjenkins-2-pluginsRed HatJenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass8.8 Highjenkins-2-pluginsRed HatImproper Privilege Management in Jenkins8.8 Highjenkins-2-pluginsRed HatPrivilege Escalation in Kubernetes9.8 Criticaljenkins-2-pluginsRed HatKibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source...6.1 Mediumjenkins-2-pluginsRed HatMissing Release of Resource after Effective Lifetime in Jenkins7.5 Highjenkins-2-pluginsRed HatIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...7.5 Highjenkins-2-pluginsRed HatThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...5.0 Mediumjenkins-2-pluginsRed HatA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....6.5 Mediumjenkins-2-pluginsRed HatThe OpenShift image import whitelist failed to enforce restrictions correctly when running...4.3 Mediumjenkins-2-pluginsRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.3 Mediumjenkins-2-pluginsRed HatArbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline8.8 High- Show moreLoading…