Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2025-64144
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Byteguard Build Actions
Jenkins ByteGuard Build Actions Plugin 1.0 stores API tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
CVE-2025-64143
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Openshift Pipeline
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
CVE-2025-48981
Alta · 8.6
CWE-311 07/10/2025
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows...
An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection.