Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Path traversal vulnerability in Blue Ocean Plugin
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happe
ThinkAdmin directory traversal vulnerability
Improper Preservation of Permissions in Apache Struts
Cookie parsing failure
Signed to Unsigned Conversion Error in Facebook Hermes
Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes
Access of Resource Using Incompatible Type in Facebook Hermes
Guard bypass in Eloquent models affecting Laravel illuminate database component
silverstripe-advancedreports vulnerable to XSS
xxl-job Multiple cross-site scripting (XSS) vulnerabilities
xxl-job sensitive data exposure
Dolibarr Unrestricted Upload of File with Dangerous Type
Passwords stored in plain text by Jenkins ReadyAPI Functional Testing Plugin
XSS vulnerability in Jenkins Build Failure Analyzer Plugin
Passwords transmitted in plain text by Jenkins ReadyAPI Functional Testing Plugin
Reflected XSS vulnerability in Jenkins JSGames Plugin
XXE vulnerability in Jenkins Klocwork Analysis Plugin
Stored XSS vulnerability in Jenkins Cadence vManager Plugin
Missing permission checks in Jenkins Database Plugin
CSRF vulnerability in Jenkins Database Plugin
Stored XSS vulnerability in Jenkins Git Parameter Plugin
Credentials stored in plain text by Jenkins tfs Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.