Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Missing Authorization in Jenkins Mercurial Plugin
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin
Bookstack Cross-site Scripting vulnerability
Uncontrolled Resource Consumption in WildFly
YOURLS Stored Cross Site Scripting (XSS)
Out-of-bounds Read in Facebook Hermes
fabric8-maven-plugin: insecure way to construct Yaml Object leading to remote code execution
Magento 2 Community Edition XSS Vulnerability
phpMyAdmin SQL injection vulnerability
phpMyAdmin Cross-site Scripting (XSS)
Access token stored in plain text by Jenkins SMS Notification Plugin
Missing permission checks in Jenkins Maven Cascade Release Plugin
XXE vulnerability in Jenkins Nerrvana Plugin
CSRF vulnerability in Jenkins Maven Cascade Release Plugin
PyroCMS Vulnerable to CSRF
PyroCMS Vulnerable to CSRF
Incorrect default pattern in Jenkins Audit Trail Plugin
Stored XSS vulnerability in Jenkins Release Plugin
Stored XSS vulnerability in Jenkins Active Choices Plugin
Improper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin
Stored XSS vulnerability in Jenkins Active Choices Plugin
Password stored in plain text by Jenkins couchdb-statistics Plugin
CSRF vulnerability in Jenkins Shared Objects Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.