Filter
AND
-Infinity
0

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job worksp…

First published (updated )

redhat/jenkinsInfoleak

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreIf an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLe…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not ex…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreInfoleak

First published (updated )

maven/org.jenkins-ci.main:jenkins-corePath Traversal

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreA improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in …

First published (updated )

Jenkins LTSA improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in U…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP en…

First published (updated )

Jenkins LTSInput Validation

First published (updated )

Jenkins LTSInput Validation, CRLF Injection

First published (updated )

Jenkins LTSXSS

First published (updated )

Jenkins LTSXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jenkins LTSXSS

First published (updated )

Jenkins LTSCSRF

First published (updated )

Jenkins LTSCSRF, XSS

First published (updated )

Jenkins LTSInput Validation

First published (updated )

Jenkins LTSUnspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jenkins LTSInfoleak

First published (updated )

Jenkins LTSJenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (th…

First published (updated )

Jenkins LTSJenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE…

First published (updated )

Jenkins LTSXSS

First published (updated )

Jenkins LTSInfoleak

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jenkins LTSJenkins Security Advisory SECURITY-144 notes: Build slave processes can execute arbitrary code on J…

First published (updated )

Jenkins LTSPath Traversal

First published (updated )

Jenkins LTSInfoleak

First published (updated )

maven/org.jenkins-ci.main:jenkins-corePath Traversal

First published (updated )

Jenkins LTSThe Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attacker…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203