Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Jenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users
Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form
Jenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users
Jenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form
Jenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token
Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens
Jenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials
Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file
Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens
Jenkins Testsigma Test Plan vulnerability exposes API keys via job configuration form
Jenkins Statistics Gatherer Plugin does not mask AWS Secret Key
Jenkins Kryptowire Plugin vulnerability stores unencrypted Kryptowire API key
Jenkins Dead Man's Snitch Plugin vulnerability stores tokens in plain text
Jenkins Nouvola DiveCloud Plugin vulnerability does not mask keys on its job configuration form
Jenkins Applitools Eyes Plugin vulnerable to XSS through its Build page
Jenkins QMetry Test Management Plugin vulnerability exposes API keys
Jenkins Dead Man's Snitch Plugin vulnerability does not mask tokens
Jenkins QMetry Test Management Plugin stores unencrypted API keys
Jenkins ReadyAPI Functional Testing Plugin vulnerability exposes secrets
Jenkins VAddy Plugin vulnerability exposes unencrypted keys to certain authenticated users
Jenkins Nouvola DiveCloud Plugin vulnerability stores unencrypted credentials
Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens
Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.