Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filtersPath traversal in MCMS
Server Side Template Injection in MCMS
SQL Injection in Jeecg-boot
SQL Injection in Jeecg-boot
Jenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
Jenkins Support Core Plugin stores sensitive data in plain text
Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin
Jenkins Snow Commander Plugin 2.0 vulnerable to Cross-Site Request Forgery
Jenkins Snow Commander Plugin prior to 2.0 vulnerable to Missing Authorization
CSRF vulnerability in Jenkins Checkmarx Plugin allow capturing credentials
Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials
Protection Mechanism Failure in Jenkins Doktor Plugin
Cross-Site Request Forgery in Jenkins dbCharts Plugin
Missing permission check in Jenkins SWAMP Plugin allows capturing credentials
CSRF vulnerability in Jenkins SWAMP Plugin allows capturing credentials
Session Fixation in WildFly Elytron
Wildfly logs plaintext passwords
Improper Input Validation in Xerces
Expression Language Injection in Netflix Conductor
Injection in Apache Archiva
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.