Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Missing permission checks in Jenkins ElasTest Plugin
Arbitrary file read vulnerability in Jenkins Storable Configs Plugin
Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
System command execution vulnerability in Selection tasks Jenkins Plugin
Arbitrary file read vulnerability in Copy data to workspace Jenkins Plugin
Stored XSS vulnerability in Locked Files Report Plugin
CSRF vulnerability in MongoDB Plugin
Stored XSS vulnerability in ClearCase Release Plugin
Stored XSS vulnerability in chosen-views-tabbar Plugin
Missing permission checks in MongoDB Plugin
Stored XSS vulnerability in Description Column Plugin
Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin
Stored XSS vulnerability in Custom Job Icon Plugin
OS command execution vulnerability in Perfecto Plugin
Missing permission check in Perfecto Plugin
Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
Incorrect permission check in Health Advisor by CloudBees Plugin
Stored XSS vulnerability in computer-queue-plugin Plugin
Missing permission check in Blue Ocean Plugin
Stored XSS vulnerability in Validating String Parameter Plugin
Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin
Stored XSS vulnerability in Radiator View Plugin
Stored XSS vulnerability in android-lint Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.