jenkins vulnerabilities (Red Hat)
371 vulnerabilities.
jenkinsRed HatUnsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin9.9 CriticaljenkinsRed HatInsertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin4.3 MediumjenkinsRed Hatgolang.org/x/crypto/salsa20/salsa uses insufficiently random values5.9 MediumjenkinsRed HatXSS in jQuery as used in Drupal, Backdrop CMS, and other products6.1 MediumjenkinsRed HatImproper Neutralization of Input During Web Page Generation in Jenkins5.4 MediumjenkinsRed HatInsufficient Session Expiration in Jenkins8.1 HighjenkinsRed HatWithdrawn Advisory: Prometheus XSS Vulnerability6.1 MediumjenkinsRed HatJenkins Config File Provider Plugin XSS vulnerability4.8 MediumjenkinsRed HatCross-site Scripting in Jenkins Blue Ocean Plugin5.4 MediumjenkinsRed HatCross-Site Request Forgery in Jenkins Blue Ocean Plugin6.5 MediumjenkinsRed HatJenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS8.1 HighjenkinsRed HatCross-Site Request Forgery in Jenkins Git Plugin4.3 MediumjenkinsRed HatImproper Limitation of a Pathname to a Restricted Directory in Jenkins6.5 MediumjenkinsRed HatImproper Authorization in Jenkins Core7.2 HighjenkinsRed HatImproper Authorization in Jenkins Core7.2 HighjenkinsRed HatJenkins Pipeline Declarative Plugin sandbox bypass vulnerability8.8 HighjenkinsRed HatJenkins Groovy Plugin sandbox bypass vulnerability8.8 HighjenkinsRed HatProtection Mechanism Failure in Jenkins Script Security Plugin8.8 HighjenkinsRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins7.8 HighjenkinsRed HatSession Fixation in Jenkins5.4 MediumjenkinsRed HatImproper Authorization in Jenkins6.5 MediumjenkinsRed HatCross-site Scripting in Jenkins6.1 MediumjenkinsRed HatPath Traversal in Jenkins6.5 MediumjenkinsRed HatAn out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1...7.5 HighjenkinsRed HatKibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console...9.8 CriticaljenkinsRed HatAn issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...7.5 HighjenkinsRed HatAn out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8...7.5 HighjenkinsRed HatJenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass8.8 HighjenkinsRed HatImproper Privilege Management in Jenkins8.8 HighjenkinsRed HatLoop with Unreachable Exit Condition in Jenkins6.5 MediumjenkinsRed HatImproper Limitation of a Pathname to a Restricted Directory in Jenkins8.2 HighjenkinsRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 MediumjenkinsRed HatDeserialization of Untrusted Data in Jenkins9.8 CriticaljenkinsRed HatMissing Release of Resource after Effective Lifetime in Jenkins7.5 HighjenkinsRed HatThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...5.0 MediumjenkinsRed HatA flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin....6.5 MediumjenkinsRed HatThe OpenShift image import whitelist failed to enforce restrictions correctly when running...4.3 MediumjenkinsRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.3 MediumjenkinsRed HatJenkins Exposes Sensitive Information via API URL4.3 MediumjenkinsRed HatJenkins affected by Open Redirect Vulnerability7.4 HighjenkinsRed HatMissing permissions check in Jenkins Core4.3 MediumjenkinsRed HatJenkins Exposes Sensitive Information from Job Configuration6.5 MediumjenkinsRed HatExposure of Sensitive Information in Jenkins Core4.3 MediumjenkinsRed HatIncorrect Authorization in Jenkins Core4.3 MediumjenkinsRed HatJenkins allows Remote Users to Inject Build Parameters6.5 MediumjenkinsRed HatJenkins allows Deserialization of Untrusted Data via an XML File8.8 HighjenkinsRed HatExposure of Sensitive Information in Jenkins Core9.8 CriticaljenkinsRed HatExposure of Sensitive Information in Jenkins Core5.3 MediumjenkinsRed HatJenkins has CRLF Injection Vulnerability in the CLI6.1 MediumjenkinsRed HatJenkins allows Execution of Code by Opening a JRMP Listener9.8 Critical- Show moreLoading…