Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Cross-site Scripting in Apache Sling XSS Protection API
Smarty PHP code injection
Apache Sling JCR ContentLoader XmlReader Arbitrary File Load
Apache Guacamole Race Condition vulnerability
Moodle Privilege escalation in quiz web services
Moodle XSS Vulnerability
XXE vulnerability in Jenkins PMD Plugin
XXE vulnerability in Jenkins DRY Plugin
XXE vulnerability in Jenkins Checkstyle Plugin
XML External Entity Reference in Jenkins FindBugs Plugin
XXE vulnerability Jenkins Warnings Plugin
CSRF vulnerability in Jenkins Release plugin
CSRF vulnerability in Jenkins Translation Assistance plugin
MitM on Jenkins Maven Plugin
Jenkins Swarm Plugin Client vulnerable to man-in-the-middle attacks
Jenkins Delivery Pipeline Plugin Cross-site Scripting vulnerability
Exposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security Plugin
Cross-Site Request Forgery (CSRF) vulnerability in Jenkins global-build-stats plugin
Yii Framework Cross-Site Request Forgery (CSRF)
Race Condition in Jenkins
Apache NiFi XSS issue in context path handling
Arbitrary shell command execution in Jenkins EC2 Plugin
Apache NiFi host header poisoning issue
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.