Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Server side request forgery in C1 CMS
SSL/TLS certificate validation globally disabled by Jenkins Proxmox Plugin
Cross site scripting in Shopizer
Firebase PHP-JWT < 6.0.0 - Algorithm Confusion
Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin
Arbitrary file read vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin
CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter Plugin
Password stored in plain text by Jenkins Proxmox Plugin
CSRF vulnerability in Jenkins RocketChat Notifier Plugin
Plaintext storage in Jenkins instant-messaging Plugin
Missing permission check in Jenkins JiraTestResultReporter Plugin
Missing permission check in Jenkins RocketChat Notifier Plugin
XXE vulnerability in Jenkins Flaky Test Handler Plugin
Missing permission checks in Jekins Bitbucket Server Integration Plugin
Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
CSRF vulnerability in Proxmox Plugin
Missing permission checks in Jenkins Proxmox Plugin
Path traversal in Jenkins Phoenix AutoTest Plugin
Cross site request forgery in Jenkins Job and Node ownership Plugin
enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability
Cross-site Scripting in Jenkins SiteMonitor Plugin
CSRF vulnerability in Jenkins Job and Node ownership Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.