Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersCross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps Plugin
CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin
CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials
Plaintext Storage of a Password in Jenkins TestQuality Updater Plugin
Cisco Spark Notifier Jenkins Plugin contains Missing Authorization
Passwords stored in plain text by Jenkins view-cloner Plugin
Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin
Cleartext Transmission of Sensitive Information in Jenkins JIRA Pipeline Steps Plugin
Plaintext Storage of a Password in Jenkins JIRA Pipeline Steps Plugin
Missing permissions check in Jenkins JIRA Pipeline Steps Plugin
Missing permission checks in Jenkins GitHub Pull Request Builder Plugin
Missing permission checks in Jenkins Orka Plugin allow capturing credentials
Field-level security issue with .keyword fields in OpenSearch
Issue with whitespace in JWT roles in OpenSearch
MITM based Zip Slip in `org.hl7.fhir.publisher:org.hl7.fhir.publisher`
Jeecg-boot is vulnerable to SQL injection
org.neo4j.procedure:apoc Path Traversal Vulnerability
Apiman Manager API affected by Jackson denial of service vulnerability
globalpom-utils has Insecure Temporary File
Http4s improperly parses User-Agent and Server headers
XWiki CKEditor.HTMLConverter vulnerable to Remote Code Execution via Cross-Site Request Forgery
dssp vulnerable to Improper Restriction of XML External Entity Reference
bonita-connector-webservice XML External Entity vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.