Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
OS command injection vulnerability in Jenkins Play Framework Plugin
XSS vulnerability in Jenkins Subversion Partial Release Manager Plugin
Missing permission check in Jenkins Project Inheritance Plugin
Improper Neutralization of Input During Web Page Generation in Jenkins Script Security Plugin
Improper permission checks in Jenkins Swarm Plugin
Stored XSS vulnerability in Jenkins Compact Columns Plugin
Complete lack of CSRF protection in Jenkins Selenium Plugin can lead to OS command injection
Stored XSS vulnerability in Jenkins ECharts API Plugin
Stored XSS vulnerability in Jenkins ECharts API Plugin
MediaWiki Open Redirect vulnerability
Fork CMS Cross-site Scripting Vulnerability
Knock Knock plugin Open redirection vulnerability
Centreon Sensitive Data Exposure vulnerability
Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header
Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action
Image Resizer Cross-Site Request Forgery (CSRF)
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header par
ASP.NET Core Denial of Service Vulnerability
.NET Core & .NET Framework Denial of Service Vulnerability
ChakraCore RCE Vulnerability
ChakraCore Remote Code Execution Vulnerability
Moodle vulnerable to RCE
Dolibarr Stored Cross-site Scripting via file upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.