厂商漏洞
「jenkins」的相关漏洞
| 产品名称 | AVD编号 | 漏洞名称 | 披露时间 |
|---|---|---|---|
| 360 Fireline | |||
| AVD-2019-10466 | XML外部实体（XXE）漏洞 | 2019-10-24 | |
| AVD-2022-43435 | jenkins 360_fireline 保护机制失效 | 2022-10-20 | |
| Absint A3 | |||
| AVD-2023-28685 | Jenkins AbsInt a³ Plugin 服务端请求伪造漏洞(CVE-2023-28685 ) | 2023-03-20 | |
| Absint Astree | |||
| AVD-2018-1000189 | CloudBees Jenkins Absint Astree Plugin命令执行漏洞 | 2018-06-06 | |
| Accurev | |||
| AVD-2018-1999028 | accurev 漏洞 | 2018-08-02 | |
| Active Choices | |||
| AVD-2020-2290 | CloudBees Jenkins跨站脚本漏洞 | 2020-10-09 | |
| AVD-2021-21699 | jenkins active_choices 在web页面生成时对输入的转义处理不恰当（跨站脚本） | 2021-11-12 | |
| AVD-2021-21616 | jenkins active_choices 在web页面生成时对输入的转义处理不恰当（跨站脚本） | 2021-02-25 | |
| AVD-2020-2289 | CloudBees Jenkins跨站脚本漏洞 | 2020-10-09 | |
| AVD-2017-1000386 | Active Choices Plugin up to 1.5.3 on Jenkins 跨站脚本攻击 | 2018-01-26 | |
| Active Directory | |||
| AVD-2019-1003009 | CloudBees Jenkins Active Directory Plugin 信任管理问题漏洞 | 2019-02-07 | |
| AVD-2020-2303 | CloudBees Jenkins Active Directory跨站请求伪造漏洞 | 2020-11-05 | |
| AVD-2020-2300 | CloudBees Jenkins Active Directory Plugin身份验证不当漏洞 | 2020-11-05 | |
| AVD-2020-2299 | CloudBees Jenkins Active Directory Plugin身份验证不当漏洞 | 2020-11-05 | |
| AVD-2017-2649 | CloudBees Jenkins Active Directory插件安全绕过漏洞 | 2018-07-28 | |
| AVD-2020-2301 | CloudBees Jenkins Active Directory Plugin授权问题漏洞 | 2020-11-05 | |
| AVD-2020-2302 | CloudBees Jenkins Active Directory Plugin身份验证不当漏洞 | 2020-11-05 | |
| AVD-2022-23105 | jenkins active_directory 敏感数据的明文传输 | 2022-01-13 | |
| Agent Server Parameter | |||
| AVD-2022-34183 | jenkins agent_server_parameter 在web页面生成时对输入的转义处理不恰当（跨站脚本） | 2022-06-24 | |
| AVD-2022-25191 | jenkins agent_server_parameter 在web页面生成时对输入的转义处理不恰当（跨站脚本） | 2022-02-16 | |
| Alauda Devops Pipeline | |||
| AVD-2019-16573 | Jenkins Alauda DevOps Pipeline插件2.3.2和Earlie中的跨站点请求伪造漏洞 | 2019-12-18 | |
| AVD-2019-16574 | Jenkins Alauda DevOps Pipeline插件2.3.2和更早版本中缺少权限检查 | 2019-12-18 | |
| Alauda Kubernetes Support | |||
| AVD-2019-16575 | CloudBees Jenkins Alauda Kubernetes Suport Plugin 跨站请求伪造漏洞 | 2019-12-18 | |
| AVD-2019-16576 | jenkins alauda_kubernetes_support 授权机制缺失 | 2019-12-18 | |
| Amazon Ec2 | |||
| AVD-2020-2091 | jenkins amazon_ec2 缺省权限不正确 | 2020-01-16 | |
| AVD-2020-2187 | CloudBees Jenkins Amazon EC2 Plugin中间人攻击漏洞 | 2020-05-07 | |
| AVD-2020-2185 | CloudBees Jenkins Amazon EC2 Plugin中间人攻击漏洞 | 2020-05-07 | |
| AVD-2020-2188 | CloudBees Jenkins Amazon EC2 Plugin授权问题漏洞 | 2020-05-07 | |
| AVD-2020-2090 | CloudBees Jenkins Amazon EC2插件跨站请求伪造漏洞 | 2020-01-16 | |
| AVD-2020-2186 | CloudBees Jenkins Amazon EC2 Plugin跨站请求伪造漏洞 | 2020-05-07 |