Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filtersJenkins CI Game Plugin allows Cross-Site Scripting (XSS)
Jenkins Violation Plugin allows Cross-Site Scripting (XSS)
Jenkins allows Cross-Site Scripting (XSS) via Crafted URL
Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access
Hadoop symlink vulnerability
Denial of service in HtmlUnit-Neko
Cross Site Request Forgery in Mingsoft MCMS
Improper Input Validation in GeoServer
Liferay Portal and Liferay DXP fails to check permissions to view sites/groups
Selenium Server (Grid) CSRF
Improper handling of case sensitivity in Spring Framework
Private key stored in plain text by Jenkins Google Compute Engine Plugin
Unauthenticated user can list hidden document from multiple velocity templates in XWiki
Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx
SQL injection in net.mingsoft:ms-mcms
Keycloak insufficient session expiration
Remote Code Execution in Spring Framework
Cross site scripting in Shopizer
Password stored in plain text by Jenkins Proxmox Plugin
Plaintext storage in Jenkins instant-messaging Plugin
Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin
Improper Certificate Validation in OWASP ZAP
Uncontrolled Resource Consumption in jboss-remoting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.