jenkins vulnerabilities (Red Hat)
371 vulnerabilities.
jenkinsRed HatStack exhaustion in json-smart leads to denial of service when parsing malformed JSON7.5 HighjenkinsRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 HighjenkinsRed HatInformation disclosure through error stack traces related to agents5.3 MediumjenkinsRed HatIncorrect Authorization in Jenkins Core4.4 MediumjenkinsRed HatIncorrect Permission Preservation in Jenkins Core4.3 MediumjenkinsRed HatDenial of service in Jenkins Core7.5 HighjenkinsRed HatDenial of service in Jenkins Core7.5 HighjenkinsRed HatIncorrect Authorization in Jenkins Core7.0 HighjenkinsRed HatCross-site Scripting vulnerability in Jenkins9.6 CriticaljenkinsRed HatApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 HighjenkinsRed HatCross-site Scripting in Jenkins Pipeline: Build Step Plugin5.4 MediumjenkinsRed HatCross-site Scripting in Jenkins JUnit Plugin5.4 MediumjenkinsRed HatHAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...9.1 CriticaljenkinsRed HatSandbox bypass in Jenkins Script Security Plugin8.8 HighjenkinsRed HatXStream Denial of Service via stack overflow8.2 HighjenkinsRed HatJettison Out-of-bounds Write vulnerability7.5 HighjenkinsRed HatRemote Code execution in SnakeYAML8.3 HighjenkinsRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 CriticaljenkinsRed HatArbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin8.1 HighjenkinsRed HatJenkins JUnit Plugin subject to Cross-site Scripting via URL conversion5.4 MediumjenkinsRed HatWhole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions7.5 HighjenkinsRed HatSpring Security authorization rules can be bypassed via forward or include dispatcher types9.8 CriticaljenkinsRed Hatspring-security-oauth2-client vulnerable to Privilege Escalation8.1 HighjenkinsRed HatStored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin5.4 MediumjenkinsRed HatJenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins6.5 MediumjenkinsRed HatCSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin8.8 HighjenkinsRed HatSandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin9.9 CriticaljenkinsRed HatSandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin9.9 CriticaljenkinsRed HatSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin9.9 CriticaljenkinsRed HatJenkins Script Security Plugin sandbox bypass vulnerability9.9 CriticaljenkinsRed HatJenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution9.9 CriticaljenkinsRed HatSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin9.9 CriticaljenkinsRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 MediumjenkinsRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 CriticaljenkinsRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 HighjenkinsRed HatUncontrolled Resource Consumption in Jackson-databind7.5 HighjenkinsRed HatStack Buffer Overflow in Woodstox6.5 MediumjenkinsRed HatStack Buffer Overflow in xstream6.5 MediumjenkinsRed HatStack Buffer Overflow in Jettison6.5 MediumjenkinsRed HatStack Buffer Overflow in Jettison6.5 MediumjenkinsRed HatDenial of Service (DoS)7.5 HighjenkinsRed HatJenkins GitHub plugin uses weak webhook signature function5.3 MediumjenkinsRed HatLack of authentication mechanism in Jenkins Git Plugin webhook5.3 MediumjenkinsRed HatLack of authentication mechanism in Jenkins Git Plugin webhook7.5 HighjenkinsRed HatLack of authentication mechanism in Jenkins Git Plugin webhook8.8 HighjenkinsRed HatJenkins Git client plugin 3.11.0 does not perform SSH host key verification8.1 HighjenkinsRed HatStack exhaustion due to deeply nested types in go/parser5.5 MediumjenkinsRed Hatfabric8 kubernetes-client vulnerable6.7 MediumjenkinsRed HatJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service7.5 HighjenkinsRed HatObservable timing discrepancy allows determining username validity in Jenkins7.5 High- Show moreLoading…