Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownJenkins git Missing AuthorizationPatch nowKEVEPSS 7.00%Jul 30, 2026
- UnknownJenkins Jenkins Deserialization of Untrusted DataPatch nowKEVEPSS 2.16%Jun 15, 2026
- Low2.1A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0.Check if you run itEPSS 0.27%Jun 1, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.Check if you run itEPSS 0.25%May 27, 2026
- Medium5.5Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers a…Check if you run itEPSS 0.29%May 27, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.Check if you run itEPSS 0.14%May 27, 2026
- Medium4.3Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.Check if you run itEPSS 0.33%May 27, 2026
- Medium4.3Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permissi…Check if you run itEPSS 0.28%May 27, 2026
- High7.5Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to p…Check if you run itEPSS 0.58%May 27, 2026
- High7.5Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control th…Check if you run itEPSS 0.43%May 27, 2026
- High8.8Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as in email content by setting the attribute, without restrictions on the image UR…Check if you run itEPSS 0.51%May 27, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.Check if you run itEPSS 0.43%May 27, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.Check if you run itEPSS 0.37%May 27, 2026
- Medium4.3Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phi…Check if you run itEPSS 0.33%Apr 29, 2026
- High8.0Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site scripting (XSS) vulnerabili…Check if you run itEPSS 0.50%Apr 29, 2026
- Critical9.0Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for…Check if you run itEPSS 0.50%Apr 29, 2026
- Medium4.3A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an att…Check if you run itEPSS 0.28%Apr 29, 2026
- Medium6.5Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in configuration when de…Check if you run itEPSS 0.39%Apr 29, 2026
- High7.5Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide cr…Check if you run itEPSS 0.60%Apr 29, 2026
- Medium4.3A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and app…Check if you run itEPSS 0.28%Apr 29, 2026
- Medium4.3Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe an…Check if you run itEPSS 0.33%Mar 18, 2026
- Medium4.3Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with…Check if you run itEPSS 0.20%Mar 18, 2026
- High7.5Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket en…Check if you run itEPSS 0.46%Mar 18, 2026
- High8.8Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives…Check if you run itEPSS 1.23%Mar 18, 2026
- Medium4.3Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploa…Check if you run itEPSS 0.34%Dec 10, 2025
54 records · page 1 of 3
PreviousNext