Filters
Software
jenkins jenkins
25
jenkins script security
7
jenkins active directory
3
jenkins pipeline\
3
jenkins dotci
2
jenkins email extension
2
jenkins groovy libraries
2
jenkins kubernetes pipeline
2
jenkins matlab
2
jenkins semantic versioning
2
jenkins bitbucket oauth
1
jenkins cccc
1
jenkins ci/cd
1
jenkins compuware common configuration
1
jenkins convert to pipeline
1
jenkins cryptomove
1
jenkins debian package builder
1
jenkins distributed fork
1
jenkins ec2
1
jenkins generic webhook trigger
1
jenkins installation manager tool
1
jenkins japex
1
jenkins jenkins command line interface (cli)
1
jenkins jenkins stapler web framework
1
jenkins jira
1
jenkins job dsl
1
jenkins job import
1
jenkins keycloak authentication
1
jenkins matrix project jenkins
1
jenkins matrix project plugin
1
jenkins mstest
1
jenkins nuget
1
jenkins ontrack jenkins
1
jenkins openid
1
jenkins osf builder suite \
1
jenkins pipeline remote loader
1
jenkins plot
1
jenkins puppet enterprise pipeline
1
jenkins role-based authorization strategy
1
jenkins rqm
1
jenkins selection tasks
1
jenkins self-organizing swarm modules
1
jenkins sounds
1
jenkins sourcemonitor
1
jenkins ssh
1
jenkins testcomplete support
1
jenkins update-center2
1
jenkins xunit
1
maven/org.jenkins-ci.main:jenkins-corePath Traversal
9.1
First published (updated )
SolarWinds Access Rights ManagerSolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
First published (updated )
SolarWinds Access Rights ManagerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
9.6
EPSS
0.06%
First published (updated )
SolarWinds Access Rights ManagerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
9.6
EPSS
0.06%
First published (updated )
SolarWinds Access Rights ManagerSolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
9.6
EPSS
0.06%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.jenkins-ci.main:jenkins-coreJenkins Command Line Interface (CLI) Path Traversal Vulnerability
First published (updated )
Jenkins Role-based Authorization StrategyJenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions e…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins Email ExtensionIn Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subje…
9.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins OpenidJenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.
9.8
First published (updated )
Jenkins Bitbucket OauthJenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login.
9.8
First published (updated )
Jenkins Keycloak AuthenticationJenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/jenkinsA sandbox bypass vulnerability was found in several Jenkins plugins. This could allow an authenticat…
9.9
First published (updated )
redhat/jenkinsA sandbox bypass vulnerability was found in several Jenkins plugins. This could allow an authenticat…
9.9
First published (updated )
redhat/jenkinsA sandbox bypass vulnerability was found in several Jenkins plugins. This could allow an authenticat…
9.9
First published (updated )
redhat/jenkinsA sandbox bypass vulnerability was found in several Jenkins plugins. This could allow an authenticat…
9.9
First published (updated )
redhat/jenkinsA sandbox bypass vulnerability was found in several Jenkins plugins. This could allow an authenticat…
9.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/jenkinsA sandbox bypass vulnerability was found in several Jenkins plugins. This could allow an authenticat…
9.9
First published (updated )
Jenkins DotciA missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attack…
9.8
First published (updated )
Jenkins DotciJenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantia…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins XunitJenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user…
9.1
First published (updated )
Jenkins Debian Package BuilderJenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents…
First published (updated )
Jenkins JenkinsJenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents o…
9.1
First published (updated )
Jenkins JenkinsFilePath#listFiles lists files outside directories with agent read access when following symbolic li…
First published (updated )
Jenkins JenkinsJenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the lib…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins JenkinsFilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*Di…
9.8
First published (updated )
Jenkins JenkinsCreating symbolic links is possible without the symlink permission.
9.8
First published (updated )
Jenkins JenkinsFilePath#unzip and FilePath#untar were not subject to any access control.
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins JenkinsFilePath#reading(FileVisitor) does not reject any operations, allowing users to have unrestricted re…
First published (updated )
Jenkins JenkinsFilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link. …
9.1
First published (updated )
Jenkins JenkinsFilePath#mkdirs does not check permission to create parent directories.
9.1
First published (updated )
maven/org.jenkins-ci.main:jenkins-coreWhen creating temporary files, permission to create files is only checked after they’ve been created…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.