Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersContent-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine Plugin
MySQL JDBC deserialization vulnerability
Arbitrary code execution in Apache Commons Text
matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions
Apache Pulsar Brokers and Proxies vulnerable to Improper Certificate Validation
Apache Pulsar Broker, Proxy, and WebSocket Proxy vulnerable to Improper Certificate Validation
Apache Pulsar Java Client vulnerable to Improper Certificate Validation
Nepxion Discovery vulnerable to potential Information Disclosure due to Server-Side Request Forgery
Apache Batik vulnerable to Server-Side Request Forgery
Apache Batik vulnerable to Server-Side Request Forgery
Apache Batik Server-Side Request Forgery
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted
Missing permission check in Jenkins build-publisher Plugin
Jenkins Compuware Common Configuration Plugin vulnerable to Improper Restriction of XML External Entity Reference
Jenkins SmallTest Plugin missing hostname validation
Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery
Jenkins BigPanda Notifier Plugin Missing Password Field Masking
Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials
CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.