Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3061▲ 555 respecto a la semana anterior
Críticas / altas1459▲ 279 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior
29 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 2.6% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 13/4/2021 | 17/6/2026 | Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability | |
| Modificada | Alta (8.8) | 0.84% | — | Jenkins Team Foundation Server | 30/3/2021 | 17/6/2026 | A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. | |
| Modificada | Media (6.5) | 0.97% | — | Jenkins Team Foundation Server | 30/3/2021 | 17/6/2026 | A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. | |
| Modificada | Media (4.3) | 0.79% | — | Jenkins Team Foundation Server | 30/3/2021 | 17/6/2026 | A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins. | |
| Modificada | Media (5.4) | 1.5% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 10/12/2020 | 17/6/2026 | Azure DevOps Server and Team Foundation Services Spoofing Vulnerability | |
| Modificada | Baja (3.3) | 0.26% | — | Jenkins Team Foundation Server | 1/9/2020 | 17/6/2026 | Jenkins Team Foundation Server Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system. | |
| Modificada | Alta (7.5) | 2.0% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 12/3/2020 | 17/6/2026 | An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and Team Foundation Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0815. | |
| Modificada | Media (5.4) | 1.3% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 12/3/2020 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'. | |
| Modificada | Crítica (9.8) | 17% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 11/9/2019 | 17/6/2026 | A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'. | |
| Modificada | Media (5.4) | 1.5% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 11/9/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. | |
| Modificada | Media (5.4) | 1.6% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 15/7/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. | |
| Modificada | Crítica (9.8) | 13% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 15/7/2019 | 17/6/2026 | A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'. | |
| Modificada | Media (5.4) | 1.7% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 16/5/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0872. | |
| Modificada | Media (6.5) | 8.5% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 16/5/2019 | 17/6/2026 | An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to an affected server, aka 'Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability'. | |
| Modificada | Media (5.4) | 1.7% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 16/5/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979. | |
| Modificada | Media (6.1) | 2.4% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 9/4/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868,… | |
| Modificada | Media (6.1) | 2.4% | — | Microsoft Azure Devops ServerMicrosoft Team Foundation Server | 9/4/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0868,… | |
| Modificada | Media (6.1) | 2.4% | — | Microsoft Team Foundation ServerMicrosoft Azure Devops Server | 9/4/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0867, CVE-2019-0870,… | |
| Modificada | Media (6.1) | 2.4% | — | Microsoft Azure Devops ServerMicrosoft Team Foundation Server | 9/4/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0866, CVE-2019-0868, CVE-2019-0870,… | |
| Modificada | Media (6.1) | 2.6% | — | Microsoft Azure Devops ServerMicrosoft Team Foundation Server | 9/4/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0867, CVE-2019-0868, CVE-2019-0870,… | |
| Modificada | Media (5.4) | 1.7% | — | Microsoft Team Foundation Server | 9/4/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. | |
| Modificada | Media (5.4) | 1.8% | — | Microsoft Team Foundation Server | 5/3/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0742. | |
| Modificada | Media (5.4) | 1.8% | — | Microsoft Team Foundation Server | 5/3/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0743. | |
| Modificada | Media (6.5) | 4.6% | — | Microsoft Team Foundation Server | 17/1/2019 | 17/6/2026 | An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team. | |
| Modificada | Media (5.4) | 1.5% | — | Microsoft Team Foundation Server | 17/1/2019 | 17/6/2026 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team. |