Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersImproper Limitation of a Pathname to a Restricted Directory in Jenkins
Cross-Site Request Forgery in Jenkins
Missing Authorization in Jenkins
Jenkins Caliper CI Plugin stores credentials in plain text
Jenkins Gogs Plugin stored credentials in plain text
Jenkins Port Allocator Plugin stores credentials in plain text
Jenkins Dependency Graph Viewer Plugin contains Cross-site Scripting
Jenkins Docker Plugin contains Cross-Site Request Forgery
Missing permission check in Jenkins Docker Plugin
Jenkins Embeddable Build Status Plugin contains Cross-site Scripting
Jenkins ElectricFlow Plugin Missing permission checks
Jenkins JX Resources Plugin missing permission check
Jenkins JX Resources Plugin cross-site request forgery vulnerability
Incorrect Resource Transfer Between Spheres in Grails
Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin
Password in config file in KIE server
Jenkins Twitter Plugin stores credentials in plain text
Jenkins Aqua MicroScanner Plugin stored credentials in plain text
Jenkins Ansible Tower Plugin missing permission check
Jenkins Ansible Tower Plugin cross-site request forgery vulnerability
Jenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text
Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability
Jenkins GitLab Plugin missing permission checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.