Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
CSRF vulnerability in Jenkins Security Inspector plugin
Missing webhook endpoint authorization in Jenkins Rundeck Plugin
Jenkins Rundeck Plugin Missing Authorization vulnerability
Jenkins build-publisher plugin vulnerable to cross-site request forgery
Path traversal in Jenkins build-publisher Plugin
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery
Jenkins Anchore Container Image Scanner Plugin vulnerable to cross site scripting
Craft CMS Cross-site Scripting vulnerability
Jenkins BigPanda Notifier Plugin Missing Password Field Masking
API token stored in plain text by Jenkins CONS3RT Plugin
Jenkins Apprenda Plugin has Missing Authorization vulnerability
Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials
CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials
Missing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDs
Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentials
Jenkins SCM HttpClient Plugin vulnerable to Cross-Site Request Forgery
Spring Data REST can expose hidden entity attributes
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
Export Post Info <= 1.2.0 - Authenticated (Author+) CSV Injection
Tabs <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.