Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersSession fixation vulnerability in Jenkins Bitbucket OAuth Plugin
Insufficient Session Expiration in Jenkins Azure AD Plugin
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
CSRF vulnerability in Jenkins Keycloak Authentication Plugin
Missing permission check in Jenkins BearyChat Plugin
Cross-site request forgery vulnerability in Jenkins BearyChat Plugin
Field-level security issue with .keyword fields in OpenSearch
Issue with whitespace in JWT roles in OpenSearch
MITM based Zip Slip in `org.hl7.fhir.publisher:org.hl7.fhir.publisher`
Jeecg-boot is vulnerable to SQL injection
cookiejar Regular Expression Denial of Service via Cookie.parse function
Observable timing discrepancy in JOpenId
Apache Shiro Interpretation Conflict vulnerability
org.neo4j.procedure:apoc Path Traversal Vulnerability
Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator
Keycloak has lack of validation of access token on client registrations endpoint
Java Merge-sort Insecure Temporary File vulnerability
Zip4j Origin Validation Error
Apiman Manager API affected by Jackson denial of service vulnerability
Apache Sling App CMS vulnerable to reflected Cross-site Scripting
globalpom-utils has Insecure Temporary File
Http4s improperly parses User-Agent and Server headers
XWiki CKEditor.HTMLConverter vulnerable to Remote Code Execution via Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.