Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Apache Superset has incorrect authorization check
Magento affected by remote code execution vulnerability in the CMS page scheduled update feature
Magento improper access control vulnerability within Magento's Media Gallery Upload workflow
Magento XML Injection vulnerability in the Widgets Update Layout
Apache Superset vulnerable to improper data authorization
Apache Superset Server Side Request Forgery vulnerability
Apache Superset has improper default REST API permission for Gamma users
Apache Superset may expose internal traces on REST API endpoints
Apache Superset users may incorrectly create resources using the import charts feature
Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin
CSRF vulnerability in Jenkins Ivy Plugin
CSRF vulnerability in Jenkins AWS CodeCommit Trigger Plugin
Missing permission check in Jenkins AWS CodeCommit Trigger Plugin allows enumerating credentials IDs
Jenkins Google Login Plugin non-constant time token comparison
XSS vulnerability in Jenkins Job Configuration History Plugin
Job Configuration History Plugin's path traversal allows exploiting XXE vulnerability
CSRF vulnerability in Jenkins Frugal Testing Plugin
Non-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) Plugin
Path traversal in Jenkins Job Configuration History Plugin
SSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentials
Stored XSS vulnerability in Jenkins TAP Plugin
Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin
Disabled permissions can be granted by Jenkins SSH2 Easy Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.