Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersKeycloak leaks sensitive information in logged exceptions
OpenNMS Horizon RCE via Unsafe Deserialization
Lack of SSL/TLS certificate and hostname validation in Amazon EC2 Plugin
Improper permission checks in Jenkins Copy Artifact Plugin
Improper masking of some secrets in Jenkins Credentials Binding Plugin
Missing SSH host key validation in Jenkins Amazon EC2 Plugin
CSRF vulnerability in Amazon EC2 Plugin
RCE vulnerability in SCM Filter Jervis Plugin
Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
CSRF vulnerability in Jenkins CVS Plugin
Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin
Keycloak users may be able to remove MFA from other users' devices
Improper Authorization in Undertoe
Improper Input Validation in Undertow
RCE vulnerability in Jenkins AWS SAM Plugin
Credentials stored in plain text by Jenkins Copr Plugin
XXE vulnerability in Jenkins Parasoft Findings Plugin
RCE vulnerability in Jenkins Yaml Axis Plugin
XXE vulnerability in Jenkins Code Coverage API Plugin
Stored XSS vulnerability in Jenkins FitNesse Plugin
XSS vulnerability in Jenkins useMango Runner Plugin
Reflected XSS vulnerability in Jenkins AWSEB Deployment Plugin
XSS vulnerability in Jenkins Gatling Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.