Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
phpMyAdmin SQL injection vulnerability
phpMyAdmin Cross-site Scripting (XSS)
Access token stored in plain text by Jenkins SMS Notification Plugin
Missing permission checks in Jenkins Maven Cascade Release Plugin
XXE vulnerability in Jenkins Nerrvana Plugin
CSRF vulnerability in Jenkins Maven Cascade Release Plugin
PyroCMS Vulnerable to CSRF
PyroCMS Vulnerable to CSRF
Incorrect default pattern in Jenkins Audit Trail Plugin
Stored XSS vulnerability in Jenkins Release Plugin
Stored XSS vulnerability in Jenkins Active Choices Plugin
Improper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin
Stored XSS vulnerability in Jenkins Active Choices Plugin
Password stored in plain text by Jenkins couchdb-statistics Plugin
CSRF vulnerability in Jenkins Shared Objects Plugin
Arbitrary file read vulnerability in Jenkins Persona Plugin
Always-Incorrect Control Flow Implementation in Facebook Hermes
Wildfly-OpenSSL memory leak flaw
Froala WYSIWYG Editor XSS Vulnerability
MantisBT unauthorized users able to access private files
MantisBT HTML Injection vulnerability
MantisBT XXS where a Custom Field with a crafted Regular Expression property is used
MediaWiki Special:UserRights exposes the existence of hidden users
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.