Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersCross-site Scripting in Jenkins Deployment Dashboard Plugin
Cleartext Storage of Sensitive Information in Jenkins Build Notifications Plugin
Missing Authorization in Jenkins Deployment Dashboard Plugin
Cross-Site Request Forgery in Jenkins Deployment Dashboard Plugin
Missing Authorization in Jenkins Recipe Plugin
XML External Entity Reference in Jenkins Recipe Plugin
Cross-Site Request Forgery in Jenkins Recipe Plugin
Cross-site Scripting in Jenkins Validating Email Parameter Plugin
Cross-site Scripting in Jenkins eXtreme Feedback Panel Plugin
Jenkins Matrix Reloaded Plugin vulnerable to CSRF
Jenkins Matrix Reloaded Plugin vulnerable to Stored XSS
Jenkins Project Inheritance Plugin vulnerable to cross site scripting
Cross-site Scripting in Jenkins Rich Text Publisher Plugin
Cross site scripting in Jenkins build-metrics Plugin
Incorrect Authorization in Jenkins requests-plugin
Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow enumerating credentials IDs
Cross-site Scripting in Jenkins TestNG Results Plugin
Cross-site Scripting in Jenkins GitLab Plugin
Improper Authorization in Apache Shiro
Uncontrolled Resource Consumption in Spray JSON
Apache Tika contains incomplete fix for regex DoS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.