Where
-Infinity
0

JenkinsSSRF

Risk 54
Severity
8.2
First published (updated )

maven/org.codefirst.jenkins.asakusasatellite:asakusa-satellite-pluginJenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed …

Risk 31
Severity
5.5
EPSS
0.03%
First published (updated )

maven/org.codefirst.jenkins.asakusasatellite:asakusa-satellite-pluginJenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in jo…

Risk 31
Severity
5.5
EPSS
0.03%
First published (updated )

Jenkins JenkinsA missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers wi…

Risk 17
Severity
4.3
EPSS
0.03%
First published (updated )

Jenkins JenkinsA missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers wi…

Risk 17
Severity
4.3
EPSS
0.03%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

AI Cyber Challenge (AIxCC) semi-final sults from DEF CON 32 (2024)

Jenkins JenkinsJenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files fr…

Risk 46
First published (updated )

The RegisterJenkins jitters as 45,000 servers still vulnerable to RCE attacks after patch released

First published (updated )

Multiple vulnerabilities in Jenkins and Jenkins plugins

First published (updated )

maven/com.cloudtp.jenkins:paaslane-estimateMissing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with…

Risk 23
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/com.cloudtp.jenkins:paaslane-estimateCSRF

Risk 79
Severity
8.8
First published (updated )

Jenkins Paaslane Estimate JenkinsJenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens disp…

Risk 24
Severity
4.3
First published (updated )

maven/com.cloudtp.jenkins:paaslane-estimateJenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted…

Risk 23
Severity
4.3
First published (updated )

maven/io.jenkins.plugins:neuvector-vulnerability-scannerCSRF

Risk 81
Severity
8.8
First published (updated )

maven/org.jenkins-ci.plugins:matlabXEE, CSRF

Risk 88
Severity
9.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.jenkins-ci.plugins:matlabCSRF

Risk 79
Severity
8.8
First published (updated )

maven/org.jenkins-ci.plugins:matlabCSRF

Risk 88
Severity
9.8
First published (updated )

maven/org.jenkins-ci.plugins:jiraJenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, al…

Risk 39
Severity
6.5
First published (updated )

maven/org.jenkins-ci.plugins:google-compute-engineIncorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earli…

Risk 23
Severity
4.3
First published (updated )

maven/org.jenkins-ci.plugins:zanataJenkins Zanata Plugin 0.6 and earlier uses a non-constant time comparison function when checking whe…

Risk 28
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.jenkins-ci.plugins:tracXSS

Risk 75
Severity
8
First published (updated )

maven/org.jenkins-ci.plugins:gogs-webhookJenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking wh…

Risk 28
Severity
5.3
First published (updated )

maven/org.jenkins-ci.plugins:lambdatest-automationJenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at…

Risk 40
Severity
6.5
First published (updated )

maven/org.jenkins-ci.plugins:lambdatest-automationA missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attacke…

Risk 23
Severity
4.3
First published (updated )

maven/com.coravy.hudson.plugins.github:githubXSS

Risk 75
Severity
8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/io.jenkins.plugins:warnings-ngInfoleak

Risk 40
Severity
6.5
First published (updated )

maven/org.tap4j:tapXSS

Risk 36
Severity
5.4
First published (updated )

maven/org.jenkins-ci.plugins:ivyCSRF

Risk 39
Severity
6.5
First published (updated )

jenkins Google Login JenkinsJenkins Google Login Plugin 1.7 and earlier uses a non-constant time comparison function when checki…

Risk 45
Severity
7.5
First published (updated )

PHP-Fusion PhpfusionArbitrary File Read in Fusion File Manager

Risk 39
Severity
5.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203