Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersMissing permission check in Coverity Plugin allows capturing credentials
Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)
CSRF vulnerability in Jenkins Google Cloud Backup Plugin
Missing permission checks in Jenkins openstack-heat Plugin
CSRF vulnerability in Jenkins openstack-heat Plugin
Missing permission check in Jenkins OpenShift Deployer Plugin
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Missing permission check in Jenkins OpenShift Deployer Plugin
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin
Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment
Dataease before 1.11.2 allows arbitrary code execution via crafter plugin
Dataease v1.11.1 SQL Injection via parameter dataSourceId
SQL Injection found in Dataease
Dataease before 1.11.2 access control issue allows attackers to arbitrarily uninstall plugin
Hardcoded JWT Token in Lin CMS Spring Boot
skylot jadx affected by Incorrect Behavior Order in vulnerable dependency
Grails framework Remote Code Execution via Data Binding
Java Melody vulnerable to cross-site scripting
Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets
thenify before 3.3.1 made use of unsafe calls to `eval`.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.