Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins Trac Publisher Plugin stores credentials in plain text
Jenkins aws-device-farm Plugin stores credentials in plain text
Jenkins VMware vRealize Automation Plugin Missing Encryption of Sensitive Data
Jenkins FTP publisher Plugin stores credentials in plain text
Jenkins Bugzilla Plugin stores credentials in plain text
Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials in plain text
Jenkins CloudShare Docker-Machine Plugin stores credentials in plain text
Missing permission check in Jenkins Audit to Database Plugin
Jenkins wildFly Deployer Plugin stores credentials in plain text
Jenkins Audit to Database Plugin stores credentials in plain text
Jenkins Perfecto Mobile Plugin stores credentials in plain text
Jenkins Fabric-beta-publisher Plugin stores credentials in plain text
Jenkins Upload to pgyer Plugin stores credentials in plain text
Jenkins hyper.sh Commons Plugin stores credentials in plain text
Jenkins Octopus Deploy Plugin stores credentials in plain text
Jenkins VS Team Services Continuous Deployment Plugin stores credentials in plain text
Jenkins Open STF Plugin stores credentials in plain text
Incorrect Authorization in Jenkins Core
Code injection in Apache Struts
Jenkins Script Security Plugin sandbox bypass vulnerability
Jenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS
Jenkins Cloud Foundry Plugin vulnerable to exposure of sensitive information
Jenkins Groovy Plugin sandbox bypass vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.