Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filtersJenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
org.xwiki.platform:xwiki-platform-logging-ui Eval Injection vulnerability
Jenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks
Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks
Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks
Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
Information disclosure through error stack traces related to agents
XML External Entity Reference in Apache NiFi
Insecure Permissions issue in jeecg-boot
Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin
dssp vulnerable to Improper Restriction of XML External Entity Reference
Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue
Jenkins Plot Plugin XML External Entity Reference vulnerability
Authenticated OpenRedirect Vulnerability
XXE vulnerability in Jenkins JAPEX Plugin
XXE vulnerability on agents in Jenkins SourceMonitor Plugin
XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin
XML External Entity Reference in Jenkins Violations Plugin
Apache Ivy does not verify target path when extracting the archive
XXE vulnerability in Jenkins Compuware Topaz for Total Test Plugin
XXE vulnerability in Jenkins REPO Plugin
Besu VM vulnerable to gas allocation error in CALL operations
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.