Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersMissing XML Validation in Apache Tomcat
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Inconsistent documentation in Apache Tomcat
Jenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins
Jenkins Black Duck Detect Plugin information exposure vulnerability
Apache Archiva vulnerable to Cross Site Request Forgery
Unrestricted Upload of File with Dangerous Type Apache Tomcat
Cross-Site Request Forgery in Jenkins Git Plugin
Cross-site Scripting in Apache NiFi
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Deserialization of Untrusted Data in Jenkins
Improper Authentication in Jenkins
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Path Traversal in Jenkins
Cross-Site Request Forgery in Jenkins
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Session Fixation in Jenkins
Cross-site Scripting in Jenkins Core
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Cross-site Scripting in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.