Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersImproper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
Jenkins has CRLF Injection Vulnerability in the CLI
Jenkins allows Execution of Code by Opening a JRMP Listener
Exposure of Sensitive Information in Jenkins Core
Jenkins allows Deserialization of Untrusted Data via an XML File
Exposure of Sensitive Information in Jenkins Core
Jenkins allows Remote Users to Inject Build Parameters
Exposure of Sensitive Information in Jenkins Core
Jenkins Exposes Sensitive Information from Job Configuration
Jenkins affected by Open Redirect Vulnerability
Missing permissions check in Jenkins Core
Incorrect Authorization in Jenkins Core
Jenkins Exposes Sensitive Information via API URL
Apache Drill vulnerable to Cross-site Scripting
Improper Certificate Validation in vt-ldap
Apache Geode gfsh authorization vulnerability
Apache Geode OQL bind parameter vulnerability
Apache Guacamole Race Condition vulnerability
MitM on Jenkins Maven Plugin
Cross-Site Request Forgery (CSRF) vulnerability in Jenkins global-build-stats plugin
Race Condition in Jenkins
Apache NiFi XSS issue in context path handling
Exposure of Sensitive Information to an Unauthorized Actor in Apache Jasypt
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.