Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersImproper Input Validation in XFire
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Improper Access Control in Apache Tomcat
Apache Brooklyn is vulnerable to cross-site request forgery (CSRF)
Cross-site Scripting In Apache Brooklyn
Cross-Site Request Forgery in Jenkins Git Plugin
Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
Apache Wicket vulnerable to CSRF attacks
Jenkins Subversion Plugin Cross-Site Request Forgery vulnerability
Apache James Privilege Escalation
Ignite Realtime Openfire Server has Cross-site Scripting vulnerability in admin console
nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate
Improper Neutralization of CRLF Sequences in Wildfly Undertow
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
Arbitrary file write in Apache Commons Fileupload
Improper Certificate Validation in vt-ldap
XXE vulnerability in Jenkins PMD Plugin
XXE vulnerability in Jenkins DRY Plugin
XXE vulnerability in Jenkins Checkstyle Plugin
XML External Entity Reference in Jenkins FindBugs Plugin
XXE vulnerability Jenkins Warnings Plugin
Apache NiFi host header poisoning issue
Cloud Foundry UAA SessionID present in Audit Event Logs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.