Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersCredentials stored in plain text by Jenkins White Source Plugin
Secret stored in plain text by Jenkins GitHub Coverage Reporter Plugin
Passwords transmitted in plain text by Jenkins Stash Branch Parameter Plugin
ActiveMQ Artemis has Insufficiently Protected Credentials
Deserialization of Untrusted Data in Spring Batch
Liferay Portal and Liferay DXP Fails to Sanitize API Data
Improper permission checks in Jenkins Copy Artifact Plugin
Improper masking of some secrets in Jenkins Credentials Binding Plugin
Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
Improper Authorization in Undertoe
Improper Input Validation in Undertow
Credentials stored in plain text by Jenkins Copr Plugin
XSS vulnerability in Jenkins Gatling Plugin
Improper Privilege Management in Elasticsearch
RCE vulnerability in Jenkins Azure Container Service Plugin
Cross-Site Request Forgery in Jenkins
Improper Neutralization of Input During Web Page Generation in Jenkins
Passwords stored in plain text by Jenkins Artifactory Plugin
Passwords transmitted in plain text by Jenkins Artifactory Plugin
Improper Neutralization of Input During Web Page Generation in Jenkins
Improper Neutralization of Input During Web Page Generation in Jenkins
Stored XSS vulnerability in Jenkins RapidDeploy Plugin
RCE vulnerability in Jenkins Pipeline: AWS Steps Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.