Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the...
CVE-2026-84666
Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history record
2026-09-03 归档
今日共收录 1407 条安全情报，包含 491 个 CVE，487 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL...
CVE-2026-84662
Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and...
CVE-2026-84661
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream bui
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor`...
CVE-2026-84658
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a construc
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission...
CVE-2026-84659
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that co
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the...
CVE-2026-84657
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission w
A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers...
CVE-2026-84656
A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permiss
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and...
CVE-2026-84660
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream bui
Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does...
CVE-2026-84653
Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform pe
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log...
CVE-2026-84648
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata (source
In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins...
CVE-2026-84654
In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for...
CVE-2026-84651
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration d
In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093...
CVE-2026-84649
In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093.vd7c3e58008a_6, included
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing...
CVE-2026-84655
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their...
CVE-2026-84645
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in indepen
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field...
CVE-2026-84646
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deseriali
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from...
CVE-2026-84650
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowin
In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins...
CVE-2026-84647
In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS
Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix...
CVE-2026-78689
Description NGINX JavaScript (njs) has a vulnerability in the XML module's namespace prefix list parser, reachable thr
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability...
CVE-2026-77180
When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configura