Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersReflected XSS vulnerability in Jenkins markup formatter preview
Missing permission check for paths with specific prefix in Jenkins
Improper handling of REST API XML deserialization errors in Jenkins
Stored XSS vulnerability in Jenkins button labels
Arbitrary file existence check in file fingerprints in Jenkins
XSS vulnerability in Jenkins notification bar
Arbitrary file read vulnerability in workspace browsers in Jenkins
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter
Keycloak vulnerable to Server-Side Request Forgery
Information leak in Gerrit
Azure SDK for Java Security Feature Bypass Vulnerability
Wildfly has a memory leak vulnerability
Missing permission checks in Jenkins Chaos Monkey Plugin
Jenkins Plugin Installation Manager Tool did not verify plugin downloads
XXE vulnerability in Jenkins CVS Plugin
Missing permission checks in Jenkins Chaos Monkey Plugin
CSRF vulnerability in Jenkins Shelve Project Plugin
Cross site scripting in Crafter CMS
XML injection in Crafter CMS
Missing Authorization in Crafter CMS
Stored XSS vulnerability in Jenkins FindBugs Plugin
Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin
Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.