Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersMissing permission check in Jenkins Docker Plugin
Jenkins Embeddable Build Status Plugin contains Cross-site Scripting
Improper Input Validation in Apache Kafka
Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin
Jenkins ElectricFlow Plugin cross-site request forgery vulnerability
Jenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability
Jenkins ElectricFlow Plugin Missing permission checks
Jenkins JX Resources Plugin missing permission check
Jenkins JX Resources Plugin cross-site request forgery vulnerability
Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation
Jenkins ElectricFlow Plugin missing permission check
Jenkins ElectricFlow Plugin is vulnerable to stored cross site scripting vulnerability
Incorrect Resource Transfer Between Spheres in Grails
Liferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API
Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin
Deserialization of Untrusted Data in Hazelcast
Password in config file in KIE server
Apache Karaf vulnerable to relative path traversal
Alkacon OpenCMS CSV Injection via New User module
Potentially compromised builds
Jenkins Azure AD Plugin stored the client secret unencrypted
Jenkins Twitter Plugin stores credentials in plain text
Missing permission check in Jenkins Static Analysis Utilities Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.