Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache MyFaces Vulnerable to EL Injection
Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
Jenkins Subversion Plugin Cross-Site Request Forgery vulnerability
Persisted XSS Vulnerability in Jenkins Sidebar Link Plugin
Improper Restriction of XML External Entity Reference in Apache OpenNLP
Insufficient Data Verification in io.really:jwt-scala
Improper Input Validation in Apache Batik
XML External Entity Reference in Apache NiFi
JBoss Keycloak CSRF Vulnerability
Injection in Apache NiFi
Apache James Privilege Escalation
Improper Access Control in MySQL Connectors Java
Denial of service in Apache Tomcat
Apache Storm log viewer path traversal vulnerability
Ignite Realtime Openfire Server has Cross-site Scripting vulnerability in admin console
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop
Insecure temporary file usage in Jenkins Git Client Plugin
nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate
Deserialization of Untrusted Data in Spring AMQP
Improper Neutralization of CRLF Sequences in Wildfly Undertow
Undertow Uncaught Exception vulnerability
JBoss RichFaces Improper Input Validation vulnerability
Password change doesn't result in Karaf clearing cache
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.