Filter
AND
-Infinity
0

JenkinsLocal file Inclusion (LFI) in Forum Infusion via Directory Traversal

8.8
First published (updated )

JenkinsInfoleak

8.8
First published (updated )

maven/com.splunk.splunkins:splunk-devopsA sandbox bypass vulnerability in Jenkins Splunk Plugin 1.7.4 and earlier allowed attackers with Ove…

8.8
First published (updated )

maven/org.jenkins-ci.plugins:jiraAn improper authorization vulnerability exists in Jenkins Jira Plugin 3.0.1 and earlier in JiraSite.…

8.8
First published (updated )

JenkinsJenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form val…

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

JenkinsCSRF

8.8
First published (updated )

maven/org.jenkins-ci.plugins:databaseCSRF

8.8
First published (updated )

maven/org.jenkins-ci.plugins:databaseCSRF

8.8
First published (updated )

JenkinsSQL Injection

8.8
First published (updated )

Ozette Simple Mobile Url RedirectWordPress Simple Mobile URL Redirect Plugin <= 1.7.2 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.plugins:nunitXEE

8.8
First published (updated )

JenkinsJenkins Gogs Cleartext Storage of Credentials Information Disclosure Vulnerability

8.8
First published (updated )

maven/org.jenkins-ci.plugins:jira-extJenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration f…

8.8
First published (updated )

maven/hudson.plugins:starteamJenkins StarTeam Plugin stores credentials unencrypted in job config.xml files on the Jenkins master…

8.8
First published (updated )

maven/org.jenkins-ci.plugins:vsts-cdJenkins VS Team Services Continuous Deployment Plugin stores credentials unencrypted in job config.x…

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/com.urbancode.ds.jenkins.plugins:sra-deployJenkins Serena SRA Deploy Plugin stores credentials unencrypted in its global configuration file on …

8.8
First published (updated )

maven/org.jenkins-ci.plugins:kmap-jenkinsJenkins Kmap Plugin stores credentials unencrypted in job config.xml files on the Jenkins master whe…

8.8
First published (updated )

maven/org.jvnet.hudson.plugins:ircbotJenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins ma…

8.8
First published (updated )

maven/com.coravy.hudson.plugins.github:githubInfoleak

8.8
First published (updated )

maven/org.jvnet.hudson.plugins:speaksJenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbi…

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

JenkinsCSRF

8.8
First published (updated )

JenkinsJenkins Rundeck Plugin 3.6.11 and earlier does not protect access to the /plugin/rundeck/webhook/ en…

8.8
First published (updated )

JenkinsCSRF

8.8
First published (updated )

maven/org.jenkins-ci.plugins:cas-pluginJenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login.

8.8
First published (updated )

maven/io.jenkins.blueocean:blueoceanCSRF

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.plugins:matlabCSRF

8.8
First published (updated )

JenkinsCSRF

8.8
First published (updated )

JenkinsBlue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organ…

8.5
First published (updated )

JenkinsXEE, SSRF

8.3
First published (updated )

JenkinsXEE, SSRF

8.3
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203