Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersStored XSS vulnerability in Jenkins Release Plugin
Stored XSS vulnerability in Jenkins Active Choices Plugin
Improper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin
Stored XSS vulnerability in Jenkins Active Choices Plugin
Password stored in plain text by Jenkins couchdb-statistics Plugin
CSRF vulnerability in Jenkins Shared Objects Plugin
Arbitrary file read vulnerability in Jenkins Persona Plugin
Wildfly-OpenSSL memory leak flaw
Liferay Portal and Liferay DXP Bypass via Double Encoded URL
XXE vulnerability in Jenkins Liquibase Runner Plugin
CSRF vulnerability in Jenkins Lockable Resources Plugin
Stored XSS vulnerability in Jenkins Liquibase Runner Plugin
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Missing permission check in Jenkins Implied Labels Plugin allows reconfiguring the plugin
Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs
CSRF vulnerability in Jenkins warnings Plugin allows remote code execution
CSRF vulnerability in Jenkins ElasTest Plugin
Passwords stored in plain text by ElasTest Plugin
Missing permission checks in Jenkins ElasTest Plugin
Arbitrary file read vulnerability in Jenkins Storable Configs Plugin
Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
System command execution vulnerability in Selection tasks Jenkins Plugin
Arbitrary file read vulnerability in Copy data to workspace Jenkins Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.