Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Cross-site Scripting in Jenkins Blue Ocean Plugin
Jenkins Config File Provider Plugin XSS vulnerability
Jenkins Warnings Next Generation Plugin cross-site request forgery vulnerability
Jenkins Active Directory Plugin Improper certificate validation with StartTLS
Sandbox Bypass via CSRF in Jenkins Warnings Plugin
Cross-Site Request Forgery in Jenkins Blue Ocean Plugin
GitHub Authentication Plugin showed plain text client secret in configuration form
XXE vulnerability in Jenkins Job Import Plugin
Jenkins Job Import Plugin CSRF vulnerability
Jenkins Mattermost Notification Plugin vulnerable to SSRF
Jenkins Kanboard Plugin vulnerable to Server-side request forgery (SSRF)
Jenkins Monitoring Plugin vulnerable to Denial of service vulnerability
GitHub Authentication Plugin session fixation vulnerability
SSRF vulnerability due to missing permission check in Jenkins OctopusDeploy Plugin
Jenkins Job Import Plugin vulnerable to exposure of sensitive information
XSS vulnerability in Jenkins Warnings Next Generation Plugin
Jenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration form
CSRF vulnerability in Jenkins Nomad Plugin allow SSRF
CSRF vulnerability in Jenkins Netsparker Enterprise Scan Plugin
SSRF vulnerability due to missing permission check in Jenkins JMS Messaging Plugin
CSRF vulnerability in jenkins-reviewbot Plugin
Moodle Blind SSRF Risk in /badges/mybackpack.php
Moodle Stored HTML in assignment submission comments allowed links to be opened directly
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.