Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins Copy To Slave Plugin allows access to arbitrary files on the Jenkins controller file system
Jenkins vSphere Plugin Cross-Site Request Forgery vulnerability
Jenkins Google Login Plugin Open Redirect vulnerability
Jenkins Google Login Plugin Session Fixation vulnerability
Jenkins HTML Publisher Plugin path traversal vulnerability
Jenkins Email Extension Plugin showed plain text SMTP password in configuration form field
Stored XSS vulnerability in Jenkins S3 Publisher Plugin
Apache NiFi JMS Deserialization issue
Improper Restriction of XML External Entity Reference in Apache NiFi
Cross-site Scripting in Graylog
Cross-site Scripting in Graylog Server
Improper Input Validation in Apache Struts
Special top object can be used to access Struts' internals
Apache Struts vulnerable to possible DoS attack when using URLValidator
Apache Struts RCE Vulnerability
Server-Side Request Forgery in Jenkins Git Plugin
Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability
Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery
Jenkins GitHub Plugin exposure of sensitive information vulnerability exists
Jenkins GitHub Plugin server-side request forgery vulnerability exists
Jenkins CAS Plugin Server-Side Request Forgery vulnerability
Jenkins Groovy Postbuild Plugin vulnerable to Cross-site Scripting
Exposure of Sensitive Information in Jenkins Kubernetes Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.