Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersPasswords transmitted in plain text by Jenkins ReadyAPI Functional Testing Plugin
Reflected XSS vulnerability in Jenkins JSGames Plugin
XXE vulnerability in Jenkins Klocwork Analysis Plugin
Stored XSS vulnerability in Jenkins Cadence vManager Plugin
Missing permission checks in Jenkins Database Plugin
CSRF vulnerability in Jenkins Database Plugin
Stored XSS vulnerability in Jenkins Git Parameter Plugin
Credentials stored in plain text by Jenkins tfs Plugin
Secret stored in plain text by Jenkins Parameterized Remote Trigger Plugin
CSRF vulnerability in Jenkins Database Plugin
Stored XSS vulnerability in Jenkins Valgrind Plugin
XXE vulnerability in Jenkins Valgrind Plugin
Maven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted Data
Improper privilege management in elasticsearch
CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
CSRF vulnerability in Jenkins Flaky Test Handler Plugin
Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
Stored XSS vulnerability in Jenkins Yet Another Build Visualizer Plugin
Jenkins Cross-site Scripting vulnerability in project naming strategy
Improper Neutralization of Input During Web Page Generation in Jenkins
Jenkins Email Extension Plugin SMTP password transmitted and displayed in plain text
Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
Jenkins Cross-Site Scripting vulnerability in help icons
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.