Where
AND
-Infinity
0

Jenkins Zowe zDevOps PluginA missing permission check in Jenkins Zowe zDevOps Plugin 1.1.3.50.ve350c9b_450b_1 and earlier allow…

Risk 30
Severity
4.2
First published (updated )

Zowe Zowe zDevOps PluginCSRF

Risk 30
Severity
4.2
First published (updated )

Jenkins Assembla PluginA missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/…

Risk 36
Severity
5.4
First published (updated )

Jenkins Jenkins Assembla PluginCSRF

Risk 36
Severity
5.4
First published (updated )

Jenkins FitNesse PluginJenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the…

Risk 23
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins MCP Server PluginA missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows atta…

Risk 23
Severity
4.3
First published (updated )

Contrast Security Jenkins Contrast Continuous Application Security PluginMissing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlie…

Risk 23
Severity
4.3
First published (updated )

Contrast Security Contrast Continuous Application Security PluginA missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earli…

Risk 36
Severity
5.4
First published (updated )

Jenkins EC2 Fleet PluginCSRF

Risk 36
Severity
5.4
First published (updated )

Jenkins EC2 Fleet PluginA missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows a…

Risk 36
Severity
5.4
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Gitee PluginAn incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attac…

Risk 23
Severity
4.3
First published (updated )

Jenkins Gitee PluginMissing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers …

Risk 36
Severity
5.4
First published (updated )

Jenkins Gitee PluginCSRF

Risk 36
Severity
5.4
First published (updated )

Jenkins Priority Sorter PluginCSRF

Risk 23
Severity
4.3
First published (updated )

Jenkins Bitbucket Push and Pull Request PluginJenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS ce…

Risk 33
Severity
4.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Job Configuration History PluginJenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encryp…

Risk 23
Severity
4.3
First published (updated )

Jenkins Git Parameter PluginA missing permission check in Jenkins Git Parameter Plugin 462.vdcf3df2ed2ca_ and earlier allows att…

Risk 23
Severity
4.3
First published (updated )

Jenkins Pipeline: Groovy PluginJenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can …

Risk 23
Severity
4.3
First published (updated )

Jenkins GitHub Branch Source PluginA missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlie…

Risk 23
Severity
4.3
First published (updated )

Jenkins Pipeline: Groovy PluginCSRF

Risk 23
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins Git client PluginOS Command Injection

Risk 41
Severity
5
First published (updated )

Jenkins JenkinsJenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml sub…

Risk 28
Severity
5.3
First published (updated )

Jenkins JenkinsXSS

Risk 35
Severity
5.4
First published (updated )

Jenkins JenkinsMissing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with…

Risk 23
Severity
4.3
First published (updated )

Jenkins JenkinsJenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the …

Risk 23
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Jenkins JenkinsA missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers wi…

Risk 23
Severity
4.3
First published (updated )

Jenkins JenkinsJenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after l…

Risk 23
Severity
4.3
First published (updated )

Jenkins Multijob PluginCSRF

Risk 16
Severity
4.3
EPSS
0.15%
First published (updated )

Jenkins buildgraph-view PluginXSS

Risk 42
Severity
5.5
First published (updated )

Jenkins Job Import JenkinsJenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an …

Risk 23
Severity
4.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203