Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2544▼ 345 respecto a la semana anterior

Críticas / altas1339▲ 68 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-49674	Modificada	Media (4.3)	0.48%	—	Jenkins Neuvector Vulnerability Scanner	29/11/2023	17/6/2026	A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.
CVE-2023-49673	Modificada	Alta (8.8)	0.45%	—	Jenkins Neuvector Vulnerability Scanner Jenkins Jira Jenkins Google Compute Engine Jenkins Matlab	29/11/2023	17/6/2026	A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.
CVE-2023-30517	Modificada	Media (5.3)	0.32%	—	Jenkins Neuvector Vulnerability Scanner	12/4/2023	17/6/2026	Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server.
CVE-2022-43434	Modificada	Media (5.3)	0.70%	—	Jenkins Neuvector Vulnerability Scanner	19/10/2022	17/6/2026	Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
CVE-2019-10430	Modificada	Media (5.5)	0.25%	—	Jenkins Neuvector Vulnerability Scanner	25/9/2019	17/6/2026	Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.