Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2684▼ 86 respecto a la semana anterior
Críticas / altas1444▲ 301 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 0.39% | — | Jenkins Build Failure Analyzer | 20/9/2023 | 17/6/2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to delete Failure Causes. | |
| Modificada | Media (6.5) | 0.61% | — | Jenkins Build Failure Analyzer | 20/9/2023 | 17/6/2026 | A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password. | |
| Modificada | Alta (8.8) | 0.47% | — | Jenkins Build Failure Analyzer | 20/9/2023 | 17/6/2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password. | |
| Modificada | Media (5.4) | 0.60% | — | Jenkins Build Failure Analyzer | 20/9/2023 | 17/6/2026 | Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier does not escape Failure Cause names in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or update Failure Causes. | |
| Modificada | Crítica (9.8) | 1.5% | — | Failure Project Failure | 31/12/2020 | 17/6/2026 | An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when __private_get_type_id__ is overridden. | |
| Modificada | Crítica (9.8) | 2.9% | — | Failure Project Failure | 14/9/2020 | 17/6/2026 | An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: This may overlap CVE-2019-25010 | |
| Modificada | Media (5.4) | 0.75% | — | Jenkins Build Failure Analyzer | 1/9/2020 | 17/6/2026 | Jenkins Build Failure Analyzer Plugin 1.27.0 and earlier does not escape matching text in a form validation response, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to provide console output for builds used to test build log indications. | |
| Modificada | Media (6.5) | 1.1% | — | Jenkins Build Failure Analyzer | 17/12/2019 | 17/6/2026 | A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process. | |
| Modificada | Media (4.3) | 0.82% | — | Jenkins Build Failure Analyzer | 17/12/2019 | 17/6/2026 | A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression. | |
| Modificada | Alta (8.8) | 0.69% | — | Jenkins Build Failure Analyzer | 17/12/2019 | 17/6/2026 | A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers to have Jenkins evaluate a computationally expensive regular expression. | |
| Modificada | Media (6.1) | 1.2% | — | Jenkins Build Failure Analyzer | 9/2/2017 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. | |
| Modificada | Baja (3.5) | 0.97% | — | Jenkins-ci Build Failure Analyzer | 25/11/2013 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. |