Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3072▲ 552 respecto a la semana anterior
Críticas / altas1458▲ 273 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)383▲ 176 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.95% | — | Jenkins Inedo Buildmaster | 25/9/2019 | 17/6/2026 | Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure. | |
| Modificada | Alta (7.4) | 0.86% | — | Jenkins Inedo Buildmaster | 1/8/2018 | 17/6/2026 | A man in the middle vulnerability exists in Jenkins Inedo BuildMaster Plugin 1.3 and earlier in BuildMasterConfiguration.java, BuildMasterConfig.java, BuildMasterApi.java that allows attackers to impersonate any service that Jenkins connects to. | |
| Modificada | Alta (7.5) | 1.1% | — | Inedo Buildmaster | 11/11/2017 | 17/6/2026 | Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners. | |
| Modificada | Media (6.1) | 1.0% | — | Inedo Buildmaster | 10/11/2017 | 17/6/2026 | An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites. | |
| Modificada | Media (6.1) | 0.64% | — | Inedo Buildmaster | 10/11/2017 | 17/6/2026 | Inedo BuildMaster before 5.8.2 has XSS. | |
| Modificada | Crítica (9.8) | 2.0% | — | Inedo Buildmaster | 10/11/2017 | 17/6/2026 | In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used. |