Filter
-Infinity
0

maven/org.jenkins-ci.main:jenkins-coreIn Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\`) chara…

EPSS
0.06%
First published (updated )

maven/org.jenkins-ci.main:jenkins-coreCSRF

EPSS
0.04%
First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when …

EPSS
0.04%
First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when …

EPSS
0.04%
First published (updated )

Multiple vulnerabilities in Jenkins

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Multiple vulnerabilities in Jenkins and Jenkins plugins

Multiple vulnerabilities in Jenkins and Jenkins plugins

First published (updated )

AI Cyber Challenge (AIxCC) semi-final sults from DEF CON 32 (2024)

Jenkins LTSJenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files fr…

First published (updated )

Multiple vulnerabilities in Jenkins

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

The RegisterJenkins jitters as 45,000 servers still vulnerable to RCE attacks after patch released

First published (updated )

Multiple vulnerabilities in Jenkins and Jenkins plugins

First published (updated )

JenkinsCSRF

8.8
First published (updated )

maven/org.jenkins-ci.plugins:matlabXEE, CSRF

First published (updated )

maven/org.jenkins-ci.plugins:matlabCSRF

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.plugins:matlabCSRF

First published (updated )

maven/org.jenkins-ci.plugins:jiraJenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, al…

First published (updated )

maven/org.jenkins-ci.plugins:tracXSS

First published (updated )

maven/org.jenkins-ci.plugins:gogs-webhookJenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking wh…

First published (updated )

maven/org.jenkins-ci.plugins:lambdatest-automationJenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.plugins:lambdatest-automationA missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attacke…

First published (updated )

maven/com.coravy.hudson.plugins.github:githubXSS

First published (updated )

Vulnerability in Jenkins

Microsoft Windows 10- Rapid Reset HTTP/2 vulnerability

First published (updated )

Multiple vulnerabilities in Jenkins and Jenkins plugins

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

JenkinsArbitrary File Read in Fusion File Manager

First published (updated )

JenkinsLocal file Inclusion (LFI) in Forum Infusion via Directory Traversal

8.8
First published (updated )

maven/org.jenkins-ci.plugins:gogs-webhookInfoleak

First published (updated )

maven/org.jenkins-ci.plugins:gogs-webhookJenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoi…

First published (updated )

maven/io.jenkins.blueocean:blueoceanCSRF

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203