Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
CSRF vulnerability in Jenkins promoted builds Plugin
View name validation bypass in Jenkins
Lack of type validation in agent related REST API in Jenkins
Docsify vulnerable to cross-site scripting due to mishandled encoding
Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin
CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials
Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs
Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials
Missing permission checks in Jenkins OWASP Dependency-Track Plugin allow capturing credentials
Missing permission check in Jenkins Cloud Statistics Plugin
Stored XSS vulnerability in Jenkins REST List Parameter Plugin
CSRF vulnerability and in Jenkins OWASP Dependency-Track Plugin allow capturing credentials
Stored XSS vulnerability in Jenkins Build With Parameters Plugin
CSRF vulnerability in Jenkins Build With Parameters Plugin
Stored XSS vulnerability in Jenkins Extra Columns Plugin
Craft CMS Cross-site Scripting Vulnerability
Reflected XSS in Zen Cart before 1.5.7a
Concrete CMS Cross-site Scripting via Survey Blocks
Missing permission checks in Jenkins Warnings Next Generation Plugin allow listing workspace contents
Incorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some items
CSRF vulnerability in Jenkins Libvirt Agents Plugin
Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs
Incorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.