Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation
Jenkins Azure VM Agents Plugin missing permission checks
Jenkins AppSpider Plugin Cross-Site Request Forgery vulnerability
Jenkins LoadComplete support Plugin Cross-site Scripting vulnerability
Jenkins Email Extension Plugin missing permission check
Jenkins Tag Profiler Plugin vulnerable to Cross-Site Request Forgery
Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
Jenkins CAS Plugin Session Fixation vulnerability
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
TestComplete support Plugin vulnerable to stored Cross-site Scripting
Jenkins Sidebar Link Plugin vulnerable to Path Traversal
Jenkins Tag Profiler Plugin missing permission check
Jenkins HashiCorp Vault Plugin has improper masking of credentials
Jenkins File Parameter Plugin arbitrary file write vulnerability
Jenkins Code Dx Plugin missing permission checks
Jenkins WSO2 Oauth Plugin Session Fixation vulnerability
Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability
Jenkins Code Dx Plugin stores API keys in plain text
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability
Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.