Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersLiferay Portal is vulnerable to DNS rebinding attacks
Liferay Portal vulnerable to password enumeration
Jenkins Publish to Bitbucket Plugin is missing a permissions check
Jenkins Curseforge Publisher Plugin does not mask API Keys displayed on the job configuration form
Jenkins Publish to Bitbucket Plugin is missing a permissions check
Jenkins Publish to Bitbucket Plugin vulnerable to CSRF and missing permissions check
Jenkins Curseforge Publisher Plugin stores API Keys unencrypted in job config.xml files
Jenkins Themis Plugin is missing a permission check
Jenkins ByteGuard Build Actions Plugin stores API tokens unencrypted in job config.xml files
Jenkins Start Windocks Containers Plugin is missing a permission check
Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery
Jenkins OpenShift Pipeline Plugin stores authorization tokens unencrypted in job config.xml files
Jenkins Eggplant Runner Plugin protection mechanism disabled
Jenkins Azure CLI Plugin does not restrict the commands it executes
Jenkins Nexus Task Runner Plugin is missing a permission check
Jenkins Nexus Task Runner Plugin vulnerable to cross-site request forgery
Jenkins Themis Plugin vulnerable to cross-site request forgery
Jenkins SAML Plugin does not implement a replay cache
Jenkins JDepend Plugin vulnerable to XML external entity attacks
Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools
Jenkins ByteGuard Build Actions Plugin does not mask API tokens displayed on the job configuration form
Jenkins Extensible Choice Parameter Plugin vulnerable to cross-site request forgery
InventoryGui allows item duplication in GUIs which use GuiStorageElement
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.