Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
MediaWiki Cross-site Scripting (XSS) vulnerability
MediaWiki Cross-site Scripting (XSS) vulnerability
OATHAuth extension in MediaWiki is not implementing rate limit
MediaWiki Cross-site Scripting (XSS) vulnerability
Liferay Portal and Liferay DXP Bypass via Double Encoded URL
XXE vulnerability in Jenkins Liquibase Runner Plugin
CSRF vulnerability in Jenkins Lockable Resources Plugin
Stored XSS vulnerability in Jenkins Liquibase Runner Plugin
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Missing permission check in Jenkins Implied Labels Plugin allows reconfiguring the plugin
Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs
CSRF vulnerability in Jenkins warnings Plugin allows remote code execution
All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.
DotPlant2 Improper Restriction of XML External Entity Reference
CSRF vulnerability in Jenkins ElasTest Plugin
Passwords stored in plain text by ElasTest Plugin
Missing permission checks in Jenkins ElasTest Plugin
Arbitrary file read vulnerability in Jenkins Storable Configs Plugin
Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
System command execution vulnerability in Selection tasks Jenkins Plugin
Arbitrary file read vulnerability in Copy data to workspace Jenkins Plugin
Stored XSS vulnerability in Locked Files Report Plugin
CSRF vulnerability in MongoDB Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.