Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 49
Reset filtersJenkins Gitee Plugin has a cross-site request forgery vulnerability
Jenkins Gitee Plugin has an incorrect permission check that allows enumerating credentials IDs
Jenkins Git client Plugin has an OS command injection vulnerability on agents
Jenkins GitHub Branch Source Plugin has missing permission check that allows enumerating GitHub Enterprise server URLs
Jenkins GitHub Integration Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test
Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin
Jenkins Git client Plugin file system information disclosure vulnerability
Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
Jenkins Git server Plugin does not perform a permission check
Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting
Arbitrary file read vulnerability in Git server Plugin can lead to RCE
CSRF vulnerability in GitLab Authentication Plugin
Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin
Jenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive Information
Non-constant time webhook token comparison in Jenkins GitLab Plugin
Improper masking of credentials Jenkins in Git Plugin
Lack of authentication mechanism in Jenkins Git Plugin webhook
Lack of authentication mechanism in Jenkins Git Plugin webhook
Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
Lack of authentication mechanism in Jenkins Git Plugin webhook
Cross-site Scripting in Jenkins GitLab Plugin
Jenkins GitLab Logo Plugin stores credentials unencrypted
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.