Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Cross-site Scripting in Zenario
Cross-site Scripting in Zenario
Cross-site Scripting in Zenario
Cross-Site Request Forgery in Jenkins Cluster Statistics Plugin
XXE vulnerability in Jenkins JAPEX Plugin
Missing permission check in Jenkins loader.io Plugin allows enumerating credentials IDs
XXE vulnerability on agents in Jenkins SourceMonitor Plugin
Jenkins BART Plugin vulnerable to cross-site scripting (XSS)
XML External Entity Reference in Jenkins CCCC Plugin
Jenkins Associated Files Plugin vulnerable to cross-site scripting (XSS)
XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin
Lack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin
Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords
Jenkins Cluster Statistics Plugin Missing Authorization vulnerability
Cross-Site Request Forgery in Jenkins Delete log Plugin
Missing Authorization in Jenkins XP-Dev Plugin
Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin
Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally
Missing permission check in Jenkins Delete log Plugin
XML External Entity Reference in Jenkins Violations Plugin
Jenkins Config Rotator Plugin vulnerable to path traversal
Incorrect permission checks in Jenkins Support Core Plugin
Jenkins JUnit Plugin subject to Cross-site Scripting via URL conversion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.