jenkins vulnerabilities (Red Hat)
371 vulnerabilities.
jenkinsRed HatStored XSS vulnerability in Jenkins Git Plugin6.1 MediumjenkinsRed HatHoles in EndpointSlice Validation Enable Host Network Hijack2.7 LowjenkinsRed HatIt was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...4.6 MediumjenkinsRed HatOpen vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in...5.5 MediumjenkinsRed HatThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...6.5 MediumjenkinsRed HatSession fixation vulnerability in Jenkins7.5 HighjenkinsRed HatImproper permission checks allow canceling queue items and aborting builds in Jenkins4.3 MediumjenkinsRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2).7.5 HighjenkinsRed HatGo before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary.5.3 MediumjenkinsRed HatGo before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 1 of 2).7.5 HighjenkinsRed HatGo before 1.15.12 and 1.16.x before 1.16.5 allows injection.7.3 HighjenkinsRed HatSessionListener can prevent a session from being invalidated breaking logout2.9 LowjenkinsRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations5.3 MediumjenkinsRed HatValidating Admission Webhook does not observe some previous fields6.5 MediumjenkinsRed Hatmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighjenkinsRed HatCross-Site Request Forgery in Jenkins Credentials Plugin6.1 MediumjenkinsRed HatImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 MediumjenkinsRed Hatblock repositories using http by default9.1 CriticaljenkinsRed HatMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs4.3 MediumjenkinsRed HatCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files5.4 MediumjenkinsRed HatIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs6.5 MediumjenkinsRed HatXML External Entity Reference vulnerability in Jenkins Config File Provider Plugin8.1 HighjenkinsRed HatView name validation bypass in Jenkins4.3 MediumjenkinsRed HatLack of type validation in agent related REST API in Jenkins4.3 MediumjenkinsRed HatImproper Locking in github.com/containers/storage6.5 MediumjenkinsRed HatJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources7.5 HighjenkinsRed HatDirectory exposure in jetty2.7 LowjenkinsRed HatIncorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items6.5 MediumjenkinsRed HatDOS vulnerability for Quoted Quality CSV headers5.2 MediumjenkinsRed HatTime-of-check Time-of-use (TOCTOU) Race Condition in Jenkins5.3 MediumjenkinsRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumjenkinsRed HatStored XSS vulnerability in Jenkins on new item page5.4 MediumjenkinsRed HatReflected XSS vulnerability in Jenkins markup formatter preview6.1 MediumjenkinsRed HatMissing permission check for paths with specific prefix in Jenkins5.3 MediumjenkinsRed HatStored XSS vulnerability in Jenkins button labels5.4 MediumjenkinsRed HatExcessive memory allocation in graph URLs leads to denial of service in Jenkins6.5 MediumjenkinsRed HatArbitrary file existence check in file fingerprints in Jenkins4.3 MediumjenkinsRed HatPath traversal vulnerability in Jenkins agent names8.0 HighjenkinsRed HatImproper handling of REST API XML deserialization errors in Jenkins8.0 HighjenkinsRed HatXSS vulnerability in Jenkins notification bar5.4 MediumjenkinsRed HatArbitrary file read vulnerability in workspace browsers in Jenkins6.5 MediumjenkinsRed HatImproper Input Validation in GoGo Protobuf8.6 HighjenkinsRed HatBuffer not correctly recycled in Gzip Request inflation4.8 MediumjenkinsRed HatGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 HighjenkinsRed HatTiming attacks in python-rsa7.5 HighjenkinsRed HatMissing authorization in Jenkins Kubernetes Plugin4.3 MediumjenkinsRed HatMissing Authorization in Jenkins Kubernetes Plugin4.3 MediumjenkinsRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin4.3 MediumjenkinsRed HatMissing Authorization in Jenkins Mercurial Plugin4.3 MediumjenkinsRed HatXXE vulnerability in Jenkins Mercurial Plugin6.5 Medium- Show moreLoading…