Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Passwords stored in plain text by Jenkins view-cloner Plugin
Path traversal vulnerability in Jenkins PWauth Security Realm Plugin
Missing permission check in Jenkins RabbitMQ Consumer Plugin
Cross-site request forgery vulnerability in Jenkins RabbitMQ Consumer Plugin
Cross-site request forgery vulnerability in Jenkins OpenID Plugin
Open redirect vulnerability in Jenkins OpenID Plugin
Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin
Cleartext Transmission of Sensitive Information in Jenkins JIRA Pipeline Steps Plugin
Plaintext Storage of a Password in Jenkins JIRA Pipeline Steps Plugin
Missing permissions check in Jenkins JIRA Pipeline Steps Plugin
Missing permission checks in Jenkins GitHub Pull Request Builder Plugin
Missing permission checks in Jenkins Orka Plugin allow capturing credentials
Missing permission checks in Jenkins Orka Plugin allow enumerating credentials IDs
XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin
Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin
Cross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin
Session fixation vulnerability in Jenkins Bitbucket OAuth Plugin
Insufficient Session Expiration in Jenkins Azure AD Plugin
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
CSRF vulnerability in Jenkins Keycloak Authentication Plugin
Missing permission check in Jenkins BearyChat Plugin
Cross-site request forgery vulnerability in Jenkins BearyChat Plugin
LTI 1.3 Grade Pass Back Implementation has Missing Authorization Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.