Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
XML external entity (XXE) vulnerability in Jenkins
XML external entity (XXE) vulnerability in Jenkins
HashBrown CMS RCE
phpMyAdmin SQL injection in user accounts page
keycloak vulnerable to unauthorized login via mail server setup
Moodle does not revoke role capabilities correctly
HashBrown CMS Directory Traversal
Pivotal Spring Framework contains unsafe Java deserialization methods
Bolt Cross-site Scripting via the slug, teaser or title parameters
php-shellcommand command injection vulnerability
Athenz vulnerable to Open Redirect
Improper Neutralization of Input During Web Page Generation in swagger-ui
Treekill Enables OS Command Injection
TYPO3 SQL Injection in low-level Query Generator
TYPO3 Insecure Deserialization in Query Generator & Query View
TYPO3 Directory Traversal on ZIP extraction
Jenkins Weibo Plugin stores credentials unencrypted in its global configuration file
Improper Authorization in Jenkins Alauda Kubernetes Suport Plugin
Cross-Site Request Forgery in Jenkins Alauda Kubernetes Suport Plugin
Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins
Jenkins SCTMExecutor Plugin stores credentials in plain text
Jenkins Team Concert Plugin missing permission check
CSRF vulnerability in Jenkins Mantis Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.