Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Apache Geode OQL bind parameter vulnerability
Magento Cross-Site Request Forgery (CSRF)
Cross-site Scripting in Apache Sling XSS Protection API
Smarty PHP code injection
Apache Sling JCR ContentLoader XmlReader Arbitrary File Load
Apache Guacamole Race Condition vulnerability
Moodle Privilege escalation in quiz web services
Moodle XSS Vulnerability
XXE vulnerability in Jenkins PMD Plugin
XXE vulnerability in Jenkins DRY Plugin
XXE vulnerability in Jenkins Checkstyle Plugin
XML External Entity Reference in Jenkins FindBugs Plugin
XXE vulnerability Jenkins Warnings Plugin
CSRF vulnerability in Jenkins Release plugin
CSRF vulnerability in Jenkins Translation Assistance plugin
MitM on Jenkins Maven Plugin
Jenkins Swarm Plugin Client vulnerable to man-in-the-middle attacks
Jenkins Delivery Pipeline Plugin Cross-site Scripting vulnerability
Exposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security Plugin
Cross-Site Request Forgery (CSRF) vulnerability in Jenkins global-build-stats plugin
Yii Framework Cross-Site Request Forgery (CSRF)
Race Condition in Jenkins
Apache NiFi XSS issue in context path handling
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.