Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache Tomcat allows remote attackers to read data that was intended to be associated with a different request
Inconsistent documentation in Apache Tomcat
Insufficient Verification of Data Authenticity in Apache Tomcat
Jenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins
Jenkins Black Duck Detect Plugin information exposure vulnerability
Apache Archiva vulnerable to Cross Site Request Forgery
Apache Archiva vulnerable to Cross-site Scripting
jQuery vulnerable to Cross-Site Scripting (XSS)
Unrestricted Upload of File with Dangerous Type Apache Tomcat
Cross-Site Request Forgery in Jenkins Git Plugin
Improper Limitation of a Pathname to a Restricted Directory in WildFly
Improper Neutralization of Input During Web Page Generation Apache ActiveMQ
Opencast RCE Vulnerability
Apache Struts forced double OGNL evaluation
Cross-site Scripting in Apache NiFi
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Deserialization of Untrusted Data in Jenkins
Improper Authentication in Jenkins
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Path Traversal in Jenkins
Cross-Site Request Forgery in Jenkins
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.