Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Stored XSS vulnerability in Jenkins Static Analysis Utilities Plugin
XXE vulnerability in Jenkins Visualworks Store Plugin
Missing authorization in Jenkins Kubernetes Plugin
Missing permission check in Jenkins AWS Global Configuration Plugin allows replacing plugin configuration
Missing Authorization in Jenkins Kubernetes Plugin
Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs
Password written to the build log by Jenkins SQLPlus Script Runner Plugin
Missing permission checks in Jenkins Azure Key Vault Plugin allow enumerating credentials IDs
Password stored in plain text by Jenkins AppSpider Plugin
XXE vulnerability in Jenkins Subversion Plugin
Authentication cache in Active Directory Jenkins Plugin allows logging in with any password
Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page
CSRF vulnerability in Jenkins Active Directory Plugin
XXE vulnerability in Jenkins Mercurial Plugin
Improper Authentication in Jenkins Active Directory Plugin
Improper Authentication (empty password) in Jenkins Active Directory Plugin
Missing Authorization in Jenkins Mercurial Plugin
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin
Bookstack Cross-site Scripting vulnerability
Uncontrolled Resource Consumption in WildFly
YOURLS Stored Cross Site Scripting (XSS)
Out-of-bounds Read in Facebook Hermes
fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.