Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersMissing permission check in Jenkins Gearman Plugin
Missing permission check in Jenkins VMware Lab Manager Slaves Plugin
Missing permission check in Jenkins SOASTA CloudTest Plugin
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Missing permission check in Jenkins sinatra-chef-builder Plugin
Jenkins Nomad Plugin missing permission check
Jenkins openid Plugin missing permission check
Jenkins Zephyr Enterprise Test Management Plugin missing permission check
Apache MyFaces Vulnerable to Path Traversal
Improper Access Control in Apache Tomcat
Keycloak Oauth Implementation Error
Jenkins SonarQube Scanner Plugin stored server authentication token in plain text
Jenkins HipChat Plugin allows credential capture due to incorrect authorization
Apache Geode vulnerable to Incorrect Authorization
Missing permission check in Jenkins FTP publisher Plugin
Missing permission check in Jenkins Audit to Database Plugin
SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin
Jenkins Jabber Server Plugin stores credentials in plain text
Missing permission check in Jenkins Kmap Plugin allow SSRF
Missing permission check in Jenkins jenkins-reviewbot Plugin
Missing permission check in Jenkins Netsparker Cloud Scan Plugin
Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow
Code injection in Apache Struts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.