Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersStored XSS vulnerability in Jenkins Publish Over SSH Plugin
Missing permission check in Jenkins Publish Over SSH Plugin
CSRF vulnerability and missing permission checks in Jenkins Publish Over SSH Plugin
Server-Side Request Forgery in Apache Kylin
SQL Injection in Apache Kylin
Infinite Loop in Apache James
Command Injection in Apache James
Denial of Service in Apache James
RCE in H2 Console
Server-side request forgery (SSRF) in Apache Batik
Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library
Using JMSAppender in log4j configuration may lead to deserialization of untrusted data
Deserialization of Untrusted Data in logback
Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Apache Sling Commons Messaging Mail
Remote code injection in Log4j
Opencast publishes global system account credentials
HTTP Method Spoofing
Cross-site Scripting in Apereo CAS
Remote code injection in Log4j
Path Traversal in com.linecorp.armeria:armeria
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Exposure of sensitive information in Apache Ozone
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.