Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersPasswords stored in plain text by Jenkins Artifactory Plugin
Passwords transmitted in plain text by Jenkins Artifactory Plugin
Stored XSS vulnerability in Jenkins RapidDeploy Plugin
Ignite Realtime Openfire allows Cross-site Scripting
Ignite Realtime Openfire allows Cross-site Scripting
Missing permission checks in Mac Plugin
XXE vulnerability in Rundeck Plugin
XXE vulnerability in Jenkins Cobertura Plugin
CSRF vulnerability in Mac Plugin
XXE vulnerability in FitNesse Plugin
XXE vulnerability in NUnit Plugin
Jenkins REST APIs vulnerable to clickjacking
Fortify Plugin stored credentials in plain text
Undertow vulnerable to Uncontrolled Resource Consumption
XXE vulnerability in Jenkins Robot Framework Plugin
keycloak vulnerable to unauthorized login via mail server setup
CSRF vulnerability in Jenkins Mantis Plugin
Jenkins RapidDeploy Plugin missing permission check
Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin
Missing permission check in Jenkins Gerrit Trigger Plugin
Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin
Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin
Jenkins Maven Release Plug-in Plugin XXE vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.