Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Jenkins S3 Publisher Plugin transmits credentials in plain text during configuration
Client secret transmitted in plain text by Azure AD Plugin
Jenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)
Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin
Missing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials
CSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials
Improper Input Validation in Jenkins Script Security Plugin
ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
ChakraCore RCE Vulnerability
Magento security bypass vulnerability
Magento deserialization vulnerability
Magento stored cross-site scripting vulnerability
Magento sql injection vulnerability
Magento Path Traversal
Magento stored cross-site scripting vulnerability
Stored XSS vulnerability in Code Coverage API Plugin
Jenkins REST APIs vulnerable to clickjacking
XXE vulnerability in Jenkins WebSphere Deployer Plugin
Fortify Plugin stored credentials in plain text
Jenkins vulnerable to UDP amplification reflection attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.