Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials
Jenkins Log Parser Plugin vulnerable to Cross-site Scripting
Jenkins Project Inheritance Plugin vulnerable to Cross-Site Request Forgery
Use of Insufficiently Random Values in Apereo CAS
Cross-site Scripting in Apache JSPWiki
Use of a weak cryptographic algorithm in Gradle
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields
Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials
Jenkins Dashboard View Plugin vulnerable to Cross-site Scripting
Jenkins Build Environment Plugin vulnerable to Cross-site Scripting
Sandbox bypass vulnerability in Script Security Plugin
Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title
Mule modules contain Directory Traversal
Jenkins Splunk Plugin Sandbox Bypass
Improper Neutralization of Input During Web Page Generation in Jenkins
Cross-Site Request Forgery in Jenkins
Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields
OHDSI WebAPI vulnerable to SQL Injection
Relution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.