Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin
Incorrect Authorization in Jenkins Request Rename Or Delete Plugin
Cross-Site Request Forgery in Jenkins XPath Configuration Viewer Plugin
Missing Authorization in Jenkins XPath Configuration Viewer Plugin
Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check
Token stored in plain text by Jenkins Cisco Spark Plugin
Cross-site Scripting in Jenkins Plot Plugin
Plaintext Storage of a Password in Jenkins Build Notifications Plugin
Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin
Jenkins Deployment Dashboard Plugin has Insufficiently Protected Credentials
Plaintext Storage of a Password in Jenkins Deployment Dashboard Plugin
Jenkins build-metrics Plugin Missing Authorization vulnerability
Cross-site Scripting in Jenkins Deployment Dashboard Plugin
Cleartext Storage of Sensitive Information in Jenkins Build Notifications Plugin
Missing Authorization in Jenkins Deployment Dashboard Plugin
Cross-Site Request Forgery in Jenkins Deployment Dashboard Plugin
Missing Authorization in Jenkins Recipe Plugin
XML External Entity Reference in Jenkins Recipe Plugin
Cross-Site Request Forgery in Jenkins Recipe Plugin
Cross-site Scripting in Jenkins Validating Email Parameter Plugin
Cross-site Scripting in Jenkins eXtreme Feedback Panel Plugin
Jenkins Matrix Reloaded Plugin vulnerable to CSRF
Jenkins Matrix Reloaded Plugin vulnerable to Stored XSS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.