Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Cross-site Scripting in Pivotal Spring Batch Admin
express-cart unrestricted file upload vulnerability
statics-server Cross-site Scripting vulnerability
Elasticsearch subject to cross site scripting
Nuclide Improper Input Validation
Cross-site Scripting in Jenkins Blue Ocean Plugin
Jenkins Config File Provider Plugin XSS vulnerability
Jenkins Warnings Next Generation Plugin cross-site request forgery vulnerability
Jenkins Active Directory Plugin Improper certificate validation with StartTLS
Sandbox Bypass via CSRF in Jenkins Warnings Plugin
Cross-Site Request Forgery in Jenkins Blue Ocean Plugin
GitHub Authentication Plugin showed plain text client secret in configuration form
XXE vulnerability in Jenkins Job Import Plugin
Jenkins Job Import Plugin CSRF vulnerability
Jenkins Mattermost Notification Plugin vulnerable to SSRF
Jenkins Kanboard Plugin vulnerable to Server-side request forgery (SSRF)
Jenkins Monitoring Plugin vulnerable to Denial of service vulnerability
GitHub Authentication Plugin session fixation vulnerability
SSRF vulnerability due to missing permission check in Jenkins OctopusDeploy Plugin
Jenkins Job Import Plugin vulnerable to exposure of sensitive information
XSS vulnerability in Jenkins Warnings Next Generation Plugin
Jenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration form
CSRF vulnerability in Jenkins Nomad Plugin allow SSRF
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.