Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 259
Reset filtersJenkins HttpOnly flag not Set for session cookies
Jenkins secure flag not set on session cookies
Cross-site Scripting in Jenkins Core
Jenkins has CRLF Injection Vulnerability in the CLI
Jenkins allows Execution of Code by Opening a JRMP Listener
Exposure of Sensitive Information in Jenkins Core
Jenkins allows Deserialization of Untrusted Data via an XML File
Exposure of Sensitive Information in Jenkins Core
Jenkins allows Remote Users to Inject Build Parameters
Exposure of Sensitive Information in Jenkins Core
Jenkins Exposes Sensitive Information from Job Configuration
Jenkins affected by Open Redirect Vulnerability
Missing permissions check in Jenkins Core
Incorrect Authorization in Jenkins Core
Jenkins Exposes Sensitive Information via API URL
Race Condition in Jenkins
Deserialization of Untrusted Data in Jenkins
Cross-Site Request Forgery in Jenkins
Improper Authentication in Jenkins
Jenkins allows Cross-Site Scripting (XSS)
Jenkins affected by Open Redirect Vulnerability
Jenkins allows HTTP Injection and Response Splitting
Jenkins vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.