Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersImproper Authentication in Apache CXF
Improper Input Validation in Apache CXF
Improper Neutralization of Input During Web Page Generation in Apache CXF
Cleartext Transmission of Sensitive Information in Apache CXF
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Nablarch Incomplete Cryptography
Improper Restriction of XML External Entity Reference in Apache FOP
Issuer validation regression in Spring Cloud SSO Connector
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Cloud Foundry Runtime Insufficient Session Expiration vulnerability
Integer Overflow or Wraparound in JBCrypt
Improper Authorization in Apache Xalan-Java
Improper Authorization in Jenkins Core
Improper Authorization in Jenkins Core
Docker image code execution with Apache Mesos
Cross-site Scripting in Jenkins
Deserialization of Untrusted Data in Spring Security
Deserialization of Untrusted Data in Jenkins
Server-Side Request Forgery in Jenkins
Improper Input Validation in Jenkins
Incorrect Authorization in Jenkins
Cross-site scripting vulnerability exists in Jenkins and Stapler Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.