Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersLack of authentication mechanism in Jenkins Git Plugin webhook
Jenkins HashiCorp Vault Plugin does not perform permission checks in several HTTP endpoints that perform Vault connection tests
External Monitor Job Type Plugin does not require POST requests for an HTTP endpoint
Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs
Jenkins Compuware Source Code Download is missing authorization
Jenkins Repository Connector Plugin does not perform a permission check in a method implementing form validation
Jenkins Openstack Heat Plugin does not perform permission checks in methods implementing form validation
Jenkins Compuware ISPW Operations Plugin does not perform permission checks in several HTTP endpoints
Jenkins Buckminster Plugin does not perform a permission check in a method implementing form validation
Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted
Jenkins Lucene-Search Plugin vulnerable to reflected (XSS) cross-site scripting
Jenkins Google Cloud Backup Plugin allows attackers with Overall/Read permission to request a manual backup.
Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs
Arbitrary file write vulnerability in Jenkins CLIF Performance Testing plugin
Jenkins Compuware Xpediter Code Coverage Plugin Missing Authorization
Jenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contents
Jenkins rhnpush-plugin does not perform a permission check in a method implementing form validation
Jenkins Compuware Topaz Utilities Plugin is missing authorization
Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system
Lucene-Search Plugin does not perform permission checks in several HTTP endpoints
Jenkins rpmsign-plugin does not perform a permission check in a method implementing form validation
Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure
Jenkins Deployer Framework Plugin vulnerable to Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.