Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersCSRF vulnerability in MongoDB Plugin
Stored XSS vulnerability in ClearCase Release Plugin
Stored XSS vulnerability in chosen-views-tabbar Plugin
Missing permission checks in MongoDB Plugin
Stored XSS vulnerability in Description Column Plugin
Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin
Stored XSS vulnerability in Custom Job Icon Plugin
OS command execution vulnerability in Perfecto Plugin
Missing permission check in Perfecto Plugin
Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
Incorrect permission check in Health Advisor by CloudBees Plugin
Stored XSS vulnerability in computer-queue-plugin Plugin
Missing permission check in Blue Ocean Plugin
Stored XSS vulnerability in Validating String Parameter Plugin
Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin
Stored XSS vulnerability in Radiator View Plugin
Stored XSS vulnerability in android-lint Plugin
Missing hostname validation in Email Extension Plugin
Path traversal vulnerability in Blue Ocean Plugin
Improper Preservation of Permissions in Apache Struts
xxl-job Multiple cross-site scripting (XSS) vulnerabilities
xxl-job sensitive data exposure
Passwords stored in plain text by Jenkins ReadyAPI Functional Testing Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.