Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Stored Cross-site Scripting vulnerability in Jenkins global-build-stats Plugin
Passwords stored in plain text by Jenkins dbCharts Plugin
Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin
CSRF vulnerability in Jenkins Release Helper Plugin
CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials
Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs
Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF
Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin
CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials
Missing permission checks in Jenkins Release Helper Plugin
Stored Cross-site Scripting vulnerability in Jenkins Environment Dashboard Plugin
Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin
Download Manager <= 3.2.38 - Unauthenticated Brute Force of File Master Key
WP Block and Stop Bad Bots <= 6.92 - SQL Injection
LearnPress <= 4.1.5 - Reflected Cross-Site Scripting
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
DQL injection through sorting parameters blocked
Improper Authorization in org.cometd.oort
Exposure of Sensitive information in httpie
Cross-site Scripting in ShowDoc
Cross-site Scripting in vditor
Cross-site Scripting in ShowDoc
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.