Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Stored XSS vulnerability in Jenkins on new item page
Path traversal vulnerability in Jenkins agent names
Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin
Reflected XSS vulnerability in Jenkins markup formatter preview
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.
Missing permission check for paths with specific prefix in Jenkins
Improper handling of REST API XML deserialization errors in Jenkins
Stored XSS vulnerability in Jenkins button labels
Arbitrary file existence check in file fingerprints in Jenkins
XSS vulnerability in Jenkins notification bar
Arbitrary file read vulnerability in workspace browsers in Jenkins
ThinkAdmin insecure unserialize vulnerability
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Formstone Vulnerable to Reflected XSS
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter
Umbraco CMS vulnerable to stored XSS
MantisBT Incorrect Authorization for bug_revision_view_page.php check
MantisBT SQL Injection via mc_project_get_users function
OpenCart Stored Cross-Site Scripting
OpenCart Cross-site Scripting (XSS) in the Subject field of mail.
dset vulnerable to prototype pollution
Prototype pollution vulnerability in 'deep-set'
flattenizer vulnerable to prototype pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.