Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersPicketLink does not properly check role based authorization
Improper Limitation of a Pathname to a Restricted Directory in Apache Solr
Apache Ambari Open Redirect
Apache Ambari SSRF Vulnerability
Improper Neutralization of Input During Web Page Generation in Apache Solr
Improper Neutralization of Input During Web Page Generation in Apache Solr
Apache Ranger Cross-site Scripting vulnerability
Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs
Apache Ranger allows users to bypass intended access restrictions via the REST API
Apache Ranger Access Restriction Bypass
Apache Jetspeed vulnerable to Cross-site Scripting
Apache Jetspeed vulnerable to SQL Injection
Path Traversal in Apache Jetspeed
Cross-site Scripting in Apache Jetspeed
Missing Cryptographic Step in OWASP Enterprise Security API for Java
Jenkins allows Cross-Site Scripting (XSS)
Jenkins allows Remote Attackers to Hijack Sessions
Jenkins allows attackers to configure restricted projects
Jenkins allows attackers to execute arbitrary jobs
Jenkins Vulnerable to Clickjacking
Jenkins does not invalidate the API token when a user is deleted
Jenkin allows attackers to obtain passwords by reading the HTML source code
Jenkins allows attackers to determine whether a user exists
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.