Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 259
Reset filtersJenkins allows attackers to determine whether a user exists
Jenkins Denial of Service vulnerability
Jenkins allows attackers to obtain sensitive information
Jenkins session fixation vulnerability
Jenkins cross-site scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation in Jenkins
Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Jenkins improperly ensures trust separation
Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs
Jenkins allows for Code Execution via Crafted Packet to the CLI
Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation
Jenkins allows for Privilege Escalation by Remote Authenticated Users
Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code
Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Jenkins allows Cross-Site Scripting (XSS)
Jenkins allows for Privilege Escalation by Remote Authenticated Users
Jenkins Vulnerable to Denial of Service (DoS)
Jenkins Cross-site Scripting vulnerability
Jenkins Cross-Site Request Forgery vulnerabilities
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Jenkins allows Cross-Site Scripting (XSS) in User Configuration
Jenkins directory traversal vulnerability
Jenkins cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.