Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersXXE vulnerability in Jenkins Visualworks Store Plugin
Missing authorization in Jenkins Kubernetes Plugin
Missing permission check in Jenkins AWS Global Configuration Plugin allows replacing plugin configuration
Missing Authorization in Jenkins Kubernetes Plugin
Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs
Password written to the build log by Jenkins SQLPlus Script Runner Plugin
Missing permission checks in Jenkins Azure Key Vault Plugin allow enumerating credentials IDs
Password stored in plain text by Jenkins AppSpider Plugin
XXE vulnerability in Jenkins Subversion Plugin
Authentication cache in Active Directory Jenkins Plugin allows logging in with any password
Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page
CSRF vulnerability in Jenkins Active Directory Plugin
XXE vulnerability in Jenkins Mercurial Plugin
Improper Authentication in Jenkins Active Directory Plugin
Improper Authentication (empty password) in Jenkins Active Directory Plugin
Missing Authorization in Jenkins Mercurial Plugin
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin
Uncontrolled Resource Consumption in WildFly
fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution
Access token stored in plain text by Jenkins SMS Notification Plugin
Missing permission checks in Jenkins Maven Cascade Release Plugin
XXE vulnerability in Jenkins Nerrvana Plugin
CSRF vulnerability in Jenkins Maven Cascade Release Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.