Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins OpenShift Login Plugin session fixation vulnerability
Jenkins SAML Single Sign On(SSO) Plugin missing permission check
Jenkins mabl Plugin missing permission check
Jenkins Orka by MacStadium Plugin missing permission check
Jenkins mabl Plugin vulnerable to exposure of system-scooped credentials
Jenkins External Monitor Job Type Plugin XML external entity vulnerability
Jenkins Pipeline restFul API Plugin vulnerable to Cross Site Request Forgery
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
Jenkins mabl Plugin missing permission check
Jenkins mabl Plugin vulnerable to cross-site request forgery
Jenkins Test Results Aggregator Plugin missing permission check
Jenkins Oracle Cloud Infrastructure Compute Plugin missing SSH host key validation
RocketMQ NameServer component Code Injection vulnerability
Apache Pulsar Function Worker Incorrect Authorization vulnerability
Apache Pulsar Broker Improper Authentication vulnerability
Apache Pulsar Incorrect Authorization vulnerability
Apache Pulsar Broker's Rest Producer vulnerable to Incorrect Authorization
Apache Ambari Expression Language Injection vulnerability
Apache Ambari Expression Language Injection vulnerability
Apache Jena Expression Language Injection vulnerability
XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
Apache MINA SSHD information disclosure vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.