Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Cross-Site Request Forgery in Jenkins Deployment Dashboard Plugin
Missing Authorization in Jenkins Recipe Plugin
XML External Entity Reference in Jenkins Recipe Plugin
Cross-Site Request Forgery in Jenkins Recipe Plugin
Cross-site Scripting in Jenkins Validating Email Parameter Plugin
Cross-site Scripting in Jenkins eXtreme Feedback Panel Plugin
Jenkins Matrix Reloaded Plugin vulnerable to CSRF
Jenkins Matrix Reloaded Plugin vulnerable to Stored XSS
Jenkins Project Inheritance Plugin vulnerable to cross site scripting
Cross-site Scripting in Jenkins Rich Text Publisher Plugin
Cross site scripting in Jenkins build-metrics Plugin
Incorrect Authorization in Jenkins requests-plugin
Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow enumerating credentials IDs
Cross-site Scripting in Jenkins TestNG Results Plugin
Cross-site Scripting in Jenkins GitLab Plugin
Yellow Yard Searchbar <= 2.7.27 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.6.8 - Authenticated (Admin+) Cross-Site Scripting
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload
ND Shortcodes <= 6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Improper Authorization in Apache Shiro
Deserialization of Untrusted Data in topthink/framework
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.