Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtershjson stack exhaustion vulnerability
Stored XSS vulnerability in Jenkins Maven Repository Server Plugin
Jenkins Template Workflows Plugin vulnerable to Stored Cross-site Scripting
Jenkins CSRF protection bypass vulnerability
Jenkins Digital.ai App Management Publisher Plugin vulnerable to Cross-Site Request Forgery
Stored XSS vulnerability in Jenkins Maven Repository Server Plugin
Arbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin
SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin
Jenkins Sonargraph Integration Plugin vulnerable to Stored Cross-site Scripting
Jenkins Digital.ai App Management Publisher Plugin missing permission checks
Apache Struts vulnerable to memory exhaustion
Apache Struts vulnerable to memory exhaustion
Insecure Temporary File in HuTool
Druid ingestion system Authenticated users can read data from other sources than intended
Apache NiFi vulnerable to Code Injection
Apache NiFi vulnerable to Deserialization of Untrusted Data
GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language
RuoYi Uncontrolled Resource Consumption vulnerability
xxl-rpc deserialization vulnerability
Jeecg P3 Biz Chat allows remote attackers to read arbitrary files
JStachio XSS vulnerability: Unescaped single quotes
DataEase API interface has IDOR vulnerability
hawtio vulnerable to Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.