Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersCSRF vulnerability in Jenkins Active Directory Plugin
XXE vulnerability in Jenkins Mercurial Plugin
Improper Authentication (empty password) in Jenkins Active Directory Plugin
XXE vulnerability in Jenkins Nerrvana Plugin
Password stored in plain text by Jenkins couchdb-statistics Plugin
XXE vulnerability in Jenkins Liquibase Runner Plugin
CSRF vulnerability in Jenkins Lockable Resources Plugin
Passwords stored in plain text by ElasTest Plugin
Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin
Missing hostname validation in Email Extension Plugin
XXE vulnerability in Jenkins Klocwork Analysis Plugin
Missing permission checks in Jenkins Database Plugin
CSRF vulnerability in Jenkins Database Plugin
XXE vulnerability in Jenkins Valgrind Plugin
Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection
Missing permission checks in Zephyr for JIRA Test Management Plugin
CSRF vulnerability in Jenkins Zephyr for JIRA Test Management Plugin
Content-Security-Policy protection for user content disabled by Jenkins ZAP Pipeline Plugin
Improper Authorization in Undertoe
XXE vulnerability in Jenkins Parasoft Findings Plugin
XXE vulnerability in Jenkins Code Coverage API Plugin
XSS vulnerability in Jenkins Gatling Plugin
XXE vulnerability in Jenkins RapidDeploy Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.