Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins project htmlresource plugin, jenkins html resource +1 moreCross-site request forgery vulnerability in Jenkins HTMLResource PluginCVE-2023-507748.1 High
- jenkins dingding json pusher, jenkins project dingding json pusher plugin +1 moreDisplayed in plain text by Dingding JSON Pusher PluginCVE-2023-507734.3 Medium
- jenkins dingding json pusher, jenkins project dingding json pusher plugin +1 moreTokens stored in plain text by Dingding JSON Pusher PluginCVE-2023-507724.3 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreOpen redirect vulnerability in Jenkins OpenId Connect Authentication PluginCVE-2023-50771Fix available6.1 Medium
- jenkins openid, jenkins project openid connect authentication plugin +1 morePassword stored in a recoverable format by Jenkins OpenId Connect Authentication PluginCVE-2023-50770Fix available6.7 Medium
- jenkins nexus platform, jenkins project nexus platform plugin +1 moreJenkins Nexus Platform Plugin missing permission checkCVE-2023-50769Fix available4.3 Medium
- jenkins nexus platform, jenkins project nexus platform plugin +1 moreJenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-50768Fix available8.8 High
- jenkins nexus platform, jenkins project nexus platform plugin +1 moreJenkins Nexus Platform Plugin missing permission checkCVE-2023-50767Fix available5.4 Medium
- jenkins nexus platform, jenkins project nexus platform plugin +1 moreJenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-50766Fix available8.8 High
- jenkins scriptler, jenkins project scriptler plugin +1 moreMissing permission check in Jenkins Scriptler PluginCVE-2023-507654.3 Medium
- jenkins scriptler, jenkins project scriptler plugin +1 moreArbitrary file deletion vulnerability in Jenkins Scriptler PluginCVE-2023-507648.1 High
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreJenkins NeuVector Vulnerability Scanner Plugin missing permission checkCVE-2023-49674Fix available4.3 Medium
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin, jenkins google compute engine +2 more +4 moreJenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-49673Fix available8.8 High
- jenkins matlab, jenkins project matlab plugin +1 moreJenkins MATLAB Plugin XML External Entity vulnerabilityCVE-2023-49656Fix available9.8 Critical
- jenkins matlab, jenkins project matlab plugin +1 moreJenkins MATLAB Plugin cross-site request forgery vulnerabilityCVE-2023-49655Fix available8.8 High
- jenkins matlab, jenkins project matlab plugin +1 moreJenkins MATLAB Plugin missing permission checksCVE-2023-49654Fix available9.8 Critical
- jenkins jira, jenkins project jira plugin +1 moreJenkins Jira Plugin vulnerable to exposure of system-scoped credentialsCVE-2023-49653Fix available6.5 Medium
- jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin has incorrect permission checksCVE-2023-49652Fix available2.7 Low
- jenkins zanata, jenkins project zanata plugin +1 moreNon-constant time webhook token hash comparison in Jenkins Zanata PluginCVE-2023-466605.3 Medium
- jenkins edgewall trac, jenkins project edgewall trac plugin +1 moreJenkins Edgewall Trac Plugin vulnerable to Stored XSSCVE-2023-466595.4 Medium
- jenkins msteams webhook trigger, jenkins project msteams webhook trigger plugin +1 moreJenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparisonCVE-2023-466585.3 Medium
- jenkins gogs, jenkins project gogs plugin +1 moreJenkins Gogs Plugin uses non-constant time webhook token comparisonCVE-2023-466575.3 Medium
- jenkins multibranch scan webhook trigger, jenkins project multibranch scan webhook trigger plugin +1 moreJenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparisonCVE-2023-466565.3 Medium
- jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 moreJenkins CloudBees CD Plugin vulnerable to arbitrary file readCVE-2023-46655Fix available6.5 Medium
- jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 moreJenkins CloudBees CD Plugin vulnerable to arbitrary file deletionCVE-2023-46654Fix available8.1 High
- jenkins lambdatest-automation, jenkins project lambdatest-automation plugin +1 moreJenkins lambdatest-automation Plugin may expose Credentials access tokenCVE-2023-46653Fix available6.5 Medium
- jenkins lambdatest-automation, jenkins project lambdatest-automation plugin +1 moreJenkins lambdatest-automation Plugin missing permission checkCVE-2023-46652Fix available4.3 Medium
- jenkins warnings, jenkins project warnings plugin +1 moreJenkins Warnings Plugin exposures system-scoped credentialsCVE-2023-46651Fix available6.5 Medium
- jenkins github, jenkins project github plugin +1 moreStored XSS vulnerability in Jenkins GitHub PluginCVE-2023-46650Fix available5.4 Medium
- eclipse jetty, debian linux, eclipse jetty.project +1 more +3 moreHTTP/2 HPACK integer overflow and buffer allocationCVE-2023-36478Fix available7.5 High
- jenkinsJenkins temporary uploaded file created with insecure permissionsCVE-2023-43498Fix available8.1 High
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreJenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-43502Fix available4.3 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreJenkins Build Failure Analyzer Plugin missing permission checkCVE-2023-43501Fix available6.5 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreJenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-43500Fix available8.8 High
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreJenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerabilityCVE-2023-43499Fix available5.4 Medium
- jenkinsJenkins temporary uploaded file created with insecure permissionsCVE-2023-43497Fix available8.1 High
- jenkinsJenkins temporary plugin file created with insecure permissionsCVE-2023-43496Fix available8.8 High
- jenkinsJenkins Cross-site Scripting vulnerabilityCVE-2023-43495Fix available5.4 Medium
- jenkinsJenkins does not exclude sensitive build variables from searchCVE-2023-43494Public exploitFix available4.3 Medium
- jenkins frugal testing, jenkins project frugal testing plugin +1 moreMissing permission checks in Jenkins Frugal Testing PluginCVE-2023-419474.3 Medium
- jenkins frugal testing, jenkins project frugal testing plugin +1 moreCSRF vulnerability in Jenkins Frugal Testing PluginCVE-2023-419463.5 Low
- jenkins assembla auth, jenkins project assembla auth plugin +1 moreDisabled permissions granted by Jenkins Assembla Auth PluginCVE-2023-419458.8 High
- jenkins aws codecommit trigger, jenkins project aws codecommit trigger plugin +1 moreHTML injection vulnerability in Jenkins AWS CodeCommit Trigger PluginCVE-2023-419446.1 Medium
- jenkins aws codecommit trigger, jenkins project aws codecommit trigger plugin +1 moreMissing permission check in Jenkins AWS CodeCommit Trigger PluginCVE-2023-419436.5 Medium
- jenkins aws codecommit trigger, jenkins project aws codecommit trigger plugin +1 moreCSRF vulnerability in Jenkins AWS CodeCommit Trigger PluginCVE-2023-419424.3 Medium
- jenkins aws codecommit trigger, jenkins project aws codecommit trigger plugin +1 moreMissing permission check in Jenkins AWS CodeCommit Trigger Plugin allows enumerating credentials IDsCVE-2023-419414.3 Medium
- jenkins tap, jenkins project tap plugin +1 moreStored XSS vulnerability in Jenkins TAP PluginCVE-2023-419405.4 Medium
- jenkins ssh2 easy, jenkins project ssh2 easy plugin +1 moreDisabled permissions can be granted by Jenkins SSH2 Easy PluginCVE-2023-41939Fix available8.8 High
- jenkins ivy, jenkins project ivy plugin +1 moreCSRF vulnerability in Jenkins Ivy PluginCVE-2023-419386.5 Medium
- jenkins bitbucket push and pull request, jenkins project bitbucket push and pull request plugin +1 moreSSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentialsCVE-2023-41937Fix available7.5 High
- Show moreLoading…