Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
Cross-Site Request Forgery in Jenkins
Missing Authorization in Jenkins
Open redirect in ASP.NET Core
Dolibarr Cross Site Scripting (XSS)
Jenkins Caliper CI Plugin stores credentials in plain text
Jenkins Gogs Plugin stored credentials in plain text
Jenkins Port Allocator Plugin stores credentials in plain text
Missing permission check in Jenkins Docker Plugin
Jenkins Dependency Graph Viewer Plugin contains Cross-site Scripting
Jenkins Docker Plugin contains Cross-Site Request Forgery
Stored credentials unencrypted in Jenkins Mashup Portlets Plugin
Missing permission check in Jenkins Docker Plugin
Jenkins Embeddable Build Status Plugin contains Cross-site Scripting
Improper Input Validation in Apache Kafka
Wikimedia information leak vulnerability
Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
MediaWiki Incorrect Access Control vulnerability
MediaWiki Cross-site Scripting (XSS)
Wikimedia MediaWik exposed suppressed log in RevisionDelete page
MediaWiki Incorrect Access Control vulnerability
Wikimedia MediaWiki allows CSRF
Wikimedia MediaWiki Incorrect Access Control vulnerability
MediaWiki Incorrect Access Control vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.