Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache Kerby LdapIdentityBackend LDAP Injection vulnerability
dd-plist XML External Entitly vulnerability
java-xmlbuilder vulnerable to XML External Entity Reference
XML External Entity (XXE) vulnerability in apoc.import.graphml
Privilege escalation in Strongbox
CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials
CSRF vulnerability in Synopsys Jenkins Coverity Plugin
Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions
Cross-site Scripting in Jenkins Email Extension Plugin
Cross-site Scripting in Jenkins Email Extension Plugin
Cross-site Scripting in Jenkins JUnit Plugin
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
Missing Authorization in Jenkins Azure Credentials Plugin
Missing Authorization in Jenkins Azure Credentials Plugin
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
Sandbox escape in Jenkins Email Extension Plugin
Privilege escalation in Apache ShenYu
Command injection in Apache Sling
XML External Entity Reference in ureport
Arbitrary file deletion in ureport
Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox
CodenameOne Pending Intent vulnerability
XML External Entity Reference in Apache NiFi
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.