Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersVisualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Unrestricted Upload of File with Dangerous Type in MCMS
Jenkins OpsGenie Plugin Plaintext Storage of a Password vulnerability
Plaintext Storage of a Password in Jenkins Jigomerge Plugin
Plaintext Storage of a Password in Jenkins Skype notifier Plugin
Password stored in plain text by Jenkins RQM Plugin
Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin
Jenkins XPath Configuration Viewer Plugin Missing Authorization vulnerability
Jenkins OpsGenie Plugin vulnerable to Cleartext Transmission of Sensitive Information
Jenkins Failed Job Deactivator Plugin Missing Authorization vulnerability
Cross-Site Request Forgery in Jenkins Failed Job Deactivator Plugin
Passwords stored in plain text by Jenkins hpe-network-virtualization plugin
Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin
Incorrect Authorization in Jenkins Request Rename Or Delete Plugin
Cross-Site Request Forgery in Jenkins XPath Configuration Viewer Plugin
Missing Authorization in Jenkins XPath Configuration Viewer Plugin
Jenkins RQM Plugin allows enumerating credentials IDs due to missing permission check
Token stored in plain text by Jenkins Cisco Spark Plugin
Cross-site Scripting in Jenkins Plot Plugin
Plaintext Storage of a Password in Jenkins Build Notifications Plugin
Plaintext Storage of a Password in Jenkins RocketChat Notifier Plugin
Jenkins Deployment Dashboard Plugin has Insufficiently Protected Credentials
Plaintext Storage of a Password in Jenkins Deployment Dashboard Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.