Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersCredentials transmitted in plain text by Backlog Plugin
Jenkins Zephyr for JIRA Test Management Plugin stores credentials in plain text
Credentials transmitted in plain text by Jenkins DeployHub Plugin
Credentials transmitted in plain text by OpenShift Deployer Plugin
Credentials stored in plain text by Zephyr Enterprise Test Management Plugin
Credentials transmitted in plain text by Jenkins Logstash Plugin
Jenkins Quality Gates Plugin transmits credentials in plain text during configuration
Jenkins Sonar Quality Gates Plugin transmits credentials in plain text during configuration
Credentials transmitted in plain text by Repository Connector Plugin
XSS vulnerability in Jenkins Audit Trail Plugin
Cross-site Scripting in Apache Struts
Passwords stored in plain text by Harvest SCM Plugin
Passwords stored in plain text by Harvest SCM Plugin
Password stored in plain text by Applatix Plugin
Token stored in plain text by DigitalOcean Plugin
Credential stored in plain text by BMC Release Package and Deployment Plugin
Password stored in plain text by ECX Copy Data Management Plugin
Credentials stored in plain text by debian-package-builder Plugin
Password stored in plain text by Dynamic Extended Choice Parameter Plugin
Password stored in plain text by Parasoft Environment Manager Plugin
Plaintext Storage of a Password in Jenkins Eagle Tester Plugin
Stored XSS vulnerability in Jenkins brakeman Plugin
Jenkins S3 Publisher Plugin transmits credentials in plain text during configuration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.