Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Missing permission check in Jenkins OpenShift Deployer Plugin
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Missing permission check in Jenkins OpenShift Deployer Plugin
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin
Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter plugin
Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin
Jenkins Deployer Framework Plugin does not restrict application path of applications when configuring a deployment
VR Calendar <= 2.4.4 - Authenticated (Administrator+) Local File Inclusion
Shopware vulnerable to persistent cross site scripting (XSS) in customer module
Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack
drupal/tagify - SA-CONTRIB-2022-051
drupal/pdf_api - SA-CONTRIB-2022-050
BxSlider WP <= 2.0.0 - Authenticated (Contributor+) Cross-Site Scripting
Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion
Duplicator – WordPress Migration Plugin <= 1.4.7 - Unauthenticated Backup Download
Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure
GS Testimonial Slider <= 1.9.6 - Authenticated (Author+) Stored Cross-Site Scripting
Booster for WooCommerce <= 5.6.1 - Cross-Site Request Forgery
untangle vulnerable to XML Entity Expansion
untangle vulnerable to Improper Restriction of XML External Entity Reference
grapesjs before 0.19.5 vulnerable to Cross-site Scripting
conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.