Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersGitHub Authentication Plugin showed plain text client secret in configuration form
XXE vulnerability in Jenkins Job Import Plugin
SSRF vulnerability due to missing permission check in Jenkins OctopusDeploy Plugin
Jenkins Job Import Plugin vulnerable to exposure of sensitive information
XSS vulnerability in Jenkins Warnings Next Generation Plugin
Jenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration form
Jenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)
Cross-site Scripting in Jenkins Build Failure Analyzer plugin
Nimbus JOSE+JWT missing overflow check
Exposure of sensitive information in Anchore Container Image Scanner Jenkins Plugin
Apache Wicket Sensitive Data Exposure
Jenkins does not Verify Checksums for Plugin Files
Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack
Jenkins CLI Deserialization of Untrusted Data vulnerability
Jenkins discloses project names via fingerprints
Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack
Jenkins allows Cross-Site Scripting (XSS)
Jenkins allows Bypass of Access Restrictions
Jenkins allows Unauthorized Viewing of Queue API Information
Jenkins allows Administrators to Access API Tokens
Jenkins has Local File Inclusion Vulnerability
Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor
Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.