Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersIncorrect Authorization in Jenkins Core
Code injection in Apache Struts
Jenkins Cloud Foundry Plugin vulnerable to exposure of sensitive information
Jenkins Groovy Plugin sandbox bypass vulnerability
Protection Mechanism Failure in Jenkins Script Security Plugin
Jenkins PRQA Plugin stored password in plain text
Jenkins AppDynamics Dashboard Plugin has insufficiently protected credentials
Missing permission check in Azure VM Agents Plugin allowed modifying VM configuration
ECS Publisher Plugin stored and displayed API token in plain text
Jenkins Slack Notification Plugin missing permission check
Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin
Script security sandbox bypass in Jenkins Job DSL Plugin
Script security sandbox bypass in Matrix Project Plugin
Information disclosure in Azure VM Agents Plugin
Jenkins Repository Connector Plugin has insufficiently protected credentials
Jenkins Groovy Plugin sandbox bypass vulnerability
Jenkins youtrack-plugin Plugin stored credentials in plain text
Jenkins Jabber Server Plugin stores credentials in plain text
Script security sandbox bypass in Jenkins Email Extension Plugin
Jenkins Diawi Upload Plugin stores credentials in plain text
Jenkins mabl Plugin stores credentials in plain text
Jenkins DeployHub Plugin stores credentials in plain text
Jenkins Minio Storage Plugin stores credentials in plain text
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.