Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Feehi CMS arbitrary file upload vulnerability
Gravity Forms stored Cross-Site Scripting (XSS) vulnerability in the survey feature
Gravity Forms stored HTML injection vulnerability
Gravity Forms stored Cross-Site Scripting (XSS) vulnerability
Mautic stored Cross-site Scripting (XSS)
XSS vulnerability in Jenkins TICS Plugin
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin
Stored XSS vulnerability in Jenkins on new item page
Path traversal vulnerability in Jenkins agent names
Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin
Reflected XSS vulnerability in Jenkins markup formatter preview
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.
Missing permission check for paths with specific prefix in Jenkins
Improper handling of REST API XML deserialization errors in Jenkins
Stored XSS vulnerability in Jenkins button labels
Arbitrary file existence check in file fingerprints in Jenkins
XSS vulnerability in Jenkins notification bar
Arbitrary file read vulnerability in workspace browsers in Jenkins
ThinkAdmin insecure unserialize vulnerability
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Formstone Vulnerable to Reflected XSS
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.