Vulnerabilities

Summary — last 7 days

New vulnerabilities3,071▲ 536 vs. last week
Critical / high1,456▲ 257 vs. last week
New active exploitation (KEV)8▼ 2 vs. last week
Unscored (no CVSS)384▲ 177 vs. last week
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (5.4)0.67%—Jenkins Lockable Resources9/23/20206/17/2026
A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.
ModifiedMedium (5.4)1.4%—Jenkins Lockable Resources3/28/20196/17/2026
A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.