Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Stored XSS vulnerability in chosen-views-tabbar Plugin
Missing permission checks in MongoDB Plugin
Stored XSS vulnerability in Description Column Plugin
Stored XSS vulnerability in Coverage/Complexity Scatter Plot Plugin
Stored XSS vulnerability in Custom Job Icon Plugin
OS command execution vulnerability in Perfecto Plugin
Missing permission check in Perfecto Plugin
Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
Incorrect permission check in Health Advisor by CloudBees Plugin
Stored XSS vulnerability in computer-queue-plugin Plugin
Missing permission check in Blue Ocean Plugin
Stored XSS vulnerability in Validating String Parameter Plugin
Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin
Stored XSS vulnerability in Radiator View Plugin
Stored XSS vulnerability in android-lint Plugin
Missing hostname validation in Email Extension Plugin
Path traversal vulnerability in Blue Ocean Plugin
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happe
ThinkAdmin directory traversal vulnerability
Improper Preservation of Permissions in Apache Struts
Cookie parsing failure
Signed to Unsigned Conversion Error in Facebook Hermes
Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.