Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Deserialization of Untrusted Data in JYaml
SilverStripe Denial of Service on flush and development URL tools
Silverstripe CSRF Protection Bypass via GraphQL
promise-probe OS command injection vulnerability
component-flatten vulnerable to Prototype Pollution
Dolibarr ERP and CRM contain XSS Vulnerability
Passwords stored in plain text by Harvest SCM Plugin
Passwords stored in plain text by Harvest SCM Plugin
Password stored in plain text by Applatix Plugin
Token stored in plain text by DigitalOcean Plugin
Credential stored in plain text by BMC Release Package and Deployment Plugin
Password stored in plain text by ECX Copy Data Management Plugin
Credentials stored in plain text by debian-package-builder Plugin
XXE vulnerability in FitNesse Plugin
Password stored in plain text by Dynamic Extended Choice Parameter Plugin
Password stored in plain text by Parasoft Environment Manager Plugin
RCE vulnerability in RadarGun Plugin
Plaintext Storage of a Password in Jenkins Eagle Tester Plugin
Stored XSS vulnerability in Jenkins brakeman Plugin
RCE vulnerability in Google Kubernetes Engine Plugin
XXE vulnerability in NUnit Plugin
Improper Input Validation in Jenkins Pipeline: Groovy Plugin
Jenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.