Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Jenkins Team Concert Plugin missing permission check
Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgery
Jenkins RapidDeploy Plugin missing permission check
Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin
Cross site scripting in Jenkins Mission Control Plugin
Jenkins Redgate SQL Change Automation Plugin has Insufficiently Protected Credentials
Jenkins Team Concert Plugin cross-site request forgery vulnerability
Jenkins Rundeck Plugin stored credentials in plain text
SSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin
Missing permission check in Jenkins Build Failure Analyzer Plugin
Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin
Inefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin
Jenkins WebSphere Deployer Plugin missing permission check
Jenkins buildgraph-view Plugin vulnerable to stored Cross-site Scripting
Improper Certificate Validation in Jenkins Spira Importer Plugin
Missing permission check in Jenkins Gerrit Trigger Plugin
Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin
Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin
Jenkins Maven Release Plug-in Plugin XXE vulnerability
Cross-Site Request Forgery in Jenkins Build Failure Analyzer Plugin
Possible to circumvent title-blacklist
The modoboa-dmarc plugin 1.1.0 for Modoboa is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to perform a denial of service
OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enforc
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.