Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins WSO2 Oauth Plugin Session Fixation vulnerability
Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability
Jenkins Code Dx Plugin stores API keys in plain text
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability
Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site Scripting
Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
Jenkins AppSpider Plugin missing permission check
Jenkins Code Dx Plugin displays API keys in plain text
Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
Jenkins Ansible Plugin job configuration form does not mask variables
Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerability
glazedlists XML Deserialization vulnerability
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
Apache Sling Commons JSON bundle vulnerable to Improper Input Validation
Vert.x STOMP server process client frames that would not send initially a connect frame
ClickHouse vulnerable to client certificate password exposure in client exception
Apache OpenMeetings Improper Authentication vulnerability
Apache OpenMeetings vulnerable to remote code execution via null-bye injection
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
Privilege escalation (PR)/RCE from account through class sheet
OpenSearch issue with fine-grained access control during extremely rare race conditions
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.