Filter
AND
-Infinity
0

maven/org.jenkins-ci.main:jenkins-coreA missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers wi…

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreA missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers wi…

First published (updated )

Multiple vulnerabilities in Jenkins and Jenkins plugins

First published (updated )

Apache Tomcat- Rapid Reset HTTP/2 vulnerability

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP en…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.jenkins-ci.main:jenkins-coreJenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error…

First published (updated )

maven/org.jenkins-ci.main:jenkins-corePath Traversal

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreJenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

First published (updated )

maven/org.jenkins-ci.main:jenkins-coreIf an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLe…

First published (updated )

Jenkins LTSXSS

2.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Jenkins LTSThe Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attacker…

First published (updated )

Jenkins LTSJenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks …

7.5
First published (updated )

Jenkins LTSCode Injection

7.5
First published (updated )

Jenkins LTSInfoleak

First published (updated )

redhat/JenkinsThe combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote au…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/JenkinsThe HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restric…

First published (updated )

Jenkins LTSXSS

First published (updated )

redhat/JenkinsInput Validation

3.5
First published (updated )

redhat/JenkinsThe API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers…

7.5
First published (updated )

Jenkins LTSXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/JenkinsThe remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execut…

First published (updated )

redhat/JenkinsCRLF Injection, Input Validation

First published (updated )

redhat/JenkinsInfoleak

First published (updated )

redhat/JenkinsInput Validation

First published (updated )

redhat/JenkinsCode Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/JenkinsMultiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote att…

7.4
First published (updated )

redhat/JenkinsCSRF

8.8
First published (updated )

redhat/JenkinsThe Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plu…

7.6
First published (updated )

Jenkins LTSCRLF Injection, Input Validation

First published (updated )

Jenkins LTSXSS

3.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203