Filter
AND

maven/org.jenkins-ci.main:jenkins-coreIf an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLe…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not ex…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreInfoleak

First published (updated )

maven/org.jenkins-ci.main:jenkins-corePath Traversal

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.main:jenkins-coreA improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in …

First published (updated )

JenkinsA improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in U…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP en…

First published (updated )

JenkinsInput Validation

First published (updated )

JenkinsInput Validation, CRLF Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

JenkinsXSS

First published (updated )

JenkinsXSS

First published (updated )

JenkinsXSS

First published (updated )

JenkinsCSRF

First published (updated )

JenkinsCSRF, XSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

JenkinsInput Validation

First published (updated )

JenkinsUnspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated…

First published (updated )

JenkinsInfoleak

First published (updated )

JenkinsJenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (th…

First published (updated )

JenkinsJenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

JenkinsXSS

First published (updated )

JenkinsInfoleak

First published (updated )

JenkinsJenkins Security Advisory SECURITY-144 notes: Build slave processes can execute arbitrary code on J…

First published (updated )

JenkinsPath Traversal

First published (updated )

JenkinsInfoleak

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.main:jenkins-corePath Traversal

First published (updated )

JenkinsThe Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attacker…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreBuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to byp…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreThe input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allo…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreInfoleak

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203