Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersIgnite Realtime Openfire directory traversal vulnerability
Improper Restriction of XML External Entity Reference in Apache POI
Jenkins build-metrics Plugin reflected cross-site scripting vulnerability
Jenkins Libvirt Slaves Plugin vlnerable to Incorrect Default Permissions
Jenkins Global Post Script Plugin missing permission check
Jenkins Zulip Plugin vulnerable to Insufficiently Protected Credentials
Jenkins Dynatrace Plugin vulnerable to Insufficiently Protected Credentials
Jenkins Kubernetes CI/CD Plugin vulnerable to Cross-Site Request Forgery
Jenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration
Jenkins Libvirt Slaves Plugin vlnerable to Cross-Site Request Forgery
Jenkins Deploy WebLogic Plugin missing permission check
Jenkins Libvirt Slaves Plugin vlnerable to Credential Enumeration
Jenkins Bitbucket OAuth Plugin contains Insufficiently Protected Credentials
Jenkins Deploy WebLogic Plugin cross-site request forgery vulnerability
Jenkins Sonar Gerrit Plugin stores credentials unencrypted
Jenkins Dynatrace Plugin contains Incorrect Default Permissions
Jenkins Dynatrace Plugin vulnerable to Cross-Site Request Forgery
Jenkins Mattermost Notification Plugin contains unencrypted storage of secret token
Jenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization
Jenkins 360 FireLine Plugin vulnerable to XML External Entity Reference
Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager
Mulesoft Mule Unsafe Deserialization
Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.