Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,646
Magento 2 Community Edition Arbitrary File Deletion
Pimcore XSS Vulnerability
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Cezerin Unauthorized Acces
Loop with Unreachable Exit Condition in Apache Thrift
Zend Framework Allows SQL Injection
Ignite Realtime Openfire vulnerable to Server Side Request Forgery
Ignite Realtime Openfire directory traversal vulnerability
Craft CMS possibility of brute force attempts
Improper Restriction of XML External Entity Reference in Apache POI
hexo-admin plugin for Node.js XSS Vulnerability
Jenkins build-metrics Plugin reflected cross-site scripting vulnerability
Jenkins Libvirt Slaves Plugin vlnerable to Incorrect Default Permissions
Jenkins Global Post Script Plugin missing permission check
Jenkins Zulip Plugin vulnerable to Insufficiently Protected Credentials
Jenkins Dynatrace Plugin vulnerable to Insufficiently Protected Credentials
Jenkins Kubernetes CI/CD Plugin vulnerable to Cross-Site Request Forgery
Jenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration
Jenkins Libvirt Slaves Plugin vlnerable to Cross-Site Request Forgery
Jenkins Deploy WebLogic Plugin missing permission check
Jenkins Libvirt Slaves Plugin vlnerable to Credential Enumeration
Jenkins Bitbucket OAuth Plugin contains Insufficiently Protected Credentials
Jenkins Deploy WebLogic Plugin cross-site request forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.