Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Jenkins GitHub Pull Request Builder Plugin
Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials
Jenkins Copy To Slave Plugin allows access to arbitrary files on the Jenkins controller file system
Jenkins vSphere Plugin Cross-Site Request Forgery vulnerability
Dolibarr SQL injection via type parameter in product/stats/card.php
Dolibarr Cross-Site Scripting (XSS) vulnerability
Dolibarr SQL injection vulnerability
Dolibarr ERP and CRM contain XSS Vulnerability
thinkphp SQL Injection via the index.php s parameter
Moodle Cross-site Scripting in the Course summary filter of the Add a new course
phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution
OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 a
Tryton vulnerable to arbitrary command execution
GeniXCMS Cross-site scripting (XSS) vulnerability
User Plugin for October CSS Allows XSS
Dolibarr Cross-site scripting (XSS) vulnerability
Jenkins Google Login Plugin Open Redirect vulnerability
Jenkins Google Login Plugin Session Fixation vulnerability
Jenkins HTML Publisher Plugin path traversal vulnerability
Jenkins Email Extension Plugin showed plain text SMTP password in configuration form field
Stored XSS vulnerability in Jenkins S3 Publisher Plugin
Joomla! XSS Vulnerability
Moodle Portfolio forum caller class allows a user to download any file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.