Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 191
Reset filtersApache StreamPipes Improper Privilege Management vulnerability
Jenkins HashiCorp Vault Plugin has improper masking of credentials
Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site Scripting
Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
Jenkins Thycotic DevOps Secrets Vault Plugin does not properly mask credentials
Jenkins Azure Key Vault Plugin does not properly mask credentials
Jenkins Kubernetes Plugin does not properly mask credentials
Jenkins Convert To Pipeline Plugin vulnerable to cross-site request forgery
Jenkins Convert To Pipeline Plugin vulnerable to command injection
Jenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting
Incorrect Permission Preservation in Jenkins Core
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
Sandbox bypass in Jenkins Script Security Plugin
Cross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps Plugin
Cleartext Transmission of Sensitive Information in Jenkins JIRA Pipeline Steps Plugin
Plaintext Storage of a Password in Jenkins JIRA Pipeline Steps Plugin
Missing permissions check in Jenkins JIRA Pipeline Steps Plugin
HAProxyMessageDecoder Stack Exhaustion DoS
Arbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin
CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin
Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin
Jenkins Script Security Plugin sandbox bypass vulnerability
Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.