Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins Lockable Resources Plugin XSS vulnerability
Jenkins VMware Lab Manager Slaves Plugin vulnerable CSRF vulnerability
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Jenkins Fortify on Demand Uploader Plugin CSRF vulnerability
CSRF vulnerability in Jenkins Audit to Database Plugin
Jenkins Slack Notification Plugin CSRF vulnerability and missing permission checks
CSRF vulnerability in Jenkins Gearman Plugin
CSRF vulnerability in Zephyr Enterprise Test Management Plugin
CSRF vulnerability in Jenkins sinatra-chef-builder Plugin
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy
Jenkins OpenID Plugin CSRF vulnerability
Cross-site request forgery vulnerability in Jenkins Nomad Plugin
CSRF vulnerability in Jenkins SOASTA CloudTest Plugin
Cross site scripting in Apache Sling
Deserialization of Untrusted Data in Jython
Improper Input Validation in Apache Struts
Deserialization of Untrusted Data in Apache commons collections
Improper Input Validation in Apache Struts
Deserialization of Untrusted Data in Groovy
Apache MyFaces Trinidad Deserialization Vulnerability
Improper Authentication in Apache Kafka
Missing permission check in Jenkins Gearman Plugin
Missing permission check in Jenkins VMware Lab Manager Slaves Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.