Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filtersPasswords stored in plain text by Jenkins dbCharts Plugin
Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin
CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials
Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin
CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials
Improper Authorization in org.cometd.oort
pgjdbc Arbitrary File Write Vulnerability
Authentication Bypass by Capture-replay in Apache Spark
Improper Restriction of XML External Entity Reference in Liquibase
Liferay Portal and Liferay DXP fails to properly import users from LDAP
Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console
Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)
Liferay Portal and Liferay DXP fails to check origin of event messages
SQL injection in net.mingsoft:ms-mcms
SQL injection in net.mingsoft:ms-mcms
Use of Externally-Controlled Format String in wire-avs
Cross-site Scripting in Apache JSPWiki
Cross Site Request Forgery in Apache JSPWiki
Improper Locking in JetBrains Kotlin
Allocation of Resources Without Limits or Throttling in metadata-extractor
Improper Handling of Exceptional Conditions inn metadata-extractor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.