Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersPasswords stored in plain text by Harvest SCM Plugin
Passwords stored in plain text by Harvest SCM Plugin
Password stored in plain text by Applatix Plugin
Token stored in plain text by DigitalOcean Plugin
Credential stored in plain text by BMC Release Package and Deployment Plugin
Password stored in plain text by ECX Copy Data Management Plugin
Credentials stored in plain text by debian-package-builder Plugin
XXE vulnerability in FitNesse Plugin
Password stored in plain text by Dynamic Extended Choice Parameter Plugin
Password stored in plain text by Parasoft Environment Manager Plugin
RCE vulnerability in RadarGun Plugin
Plaintext Storage of a Password in Jenkins Eagle Tester Plugin
Stored XSS vulnerability in Jenkins brakeman Plugin
RCE vulnerability in Google Kubernetes Engine Plugin
XXE vulnerability in NUnit Plugin
Improper Input Validation in Jenkins Pipeline: Groovy Plugin
Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)
Subversion Plugin stored XSS vulnerability
Jenkins S3 Publisher Plugin transmits credentials in plain text during configuration
Client secret transmitted in plain text by Azure AD Plugin
Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)
Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin
Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.