Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 278
Reset filtersWildfly Unsafe Deserialization Vulnerability
Credentials stored in plain text by Zephyr Enterprise Test Management Plugin
Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin
Relution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request Forgery
Missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin
Improper Encoding or Escaping of Output in Jenkins Configuration as Code Plugin
Jenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability
Crash in HeaderParser in dicer
Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP
Improper Access Control in JBoss mod_cluster
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
Lift Sensitive Information Disclosure
Missing Cryptographic Step in OWASP Enterprise Security API for Java
Jenkins Cross-Site Request Forgery vulnerabilities
Deserialization of Untrusted Data in Apache Tomcat
Authentication Bypass in Apache Tomcat
Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
Improper Neutralization of CRLF Sequences in Wildfly Undertow
XML External Entity Reference in org.picketlink:picketlink-common
Cross-Site Request Forgery (CSRF) vulnerability in Jenkins global-build-stats plugin
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin
Jenkins Publisher Over CIFS Plugin confused deputy vulnerability
Jenkins allows Cross-Site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.