Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins Code Dx Plugin missing permission checks
Jenkins Code Dx Plugin cross-site request forgery vulnerability
Jenkins Azure VM Agents Plugin missing permission checks
Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation
Jenkins Ansible Plugin stores and displays secrets in plain text
Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
Jenkins TestNG Results Plugin Stored Cross-site Scripting vulnerability
Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation
Jenkins Azure VM Agents Plugin missing permission checks
Jenkins AppSpider Plugin Cross-Site Request Forgery vulnerability
Jenkins LoadComplete support Plugin Cross-site Scripting vulnerability
Jenkins Email Extension Plugin missing permission check
Jenkins Tag Profiler Plugin vulnerable to Cross-Site Request Forgery
Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
Jenkins CAS Plugin Session Fixation vulnerability
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
TestComplete support Plugin vulnerable to stored Cross-site Scripting
Jenkins Sidebar Link Plugin vulnerable to Path Traversal
Jenkins Tag Profiler Plugin missing permission check
Jenkins HashiCorp Vault Plugin has improper masking of credentials
Jenkins File Parameter Plugin arbitrary file write vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.