Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Jenkins Compuware Xpediter Code Coverage Plugin Missing Authorization
Jenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contents
Jenkins rhnpush-plugin does not perform a permission check in a method implementing form validation
Jenkins Compuware Topaz Utilities Plugin is missing authorization
Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system
Lucene-Search Plugin does not perform permission checks in several HTTP endpoints
Jenkins rpmsign-plugin does not perform a permission check in a method implementing form validation
Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure
Jenkins Deployer Framework Plugin vulnerable to Path Traversal
Jenkins Repository Connector Plugin allows attackers with Overall/Read permission to enumerate credentials IDs
Missing permission check in Coverity Plugin allows capturing credentials
Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)
CSRF vulnerability in Jenkins Google Cloud Backup Plugin
Missing permission checks in Jenkins openstack-heat Plugin
CSRF vulnerability in Jenkins openstack-heat Plugin
Missing permission check in Jenkins OpenShift Deployer Plugin
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Missing permission check in Jenkins OpenShift Deployer Plugin
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin
Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.