Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersApache CXF is vulnerable to DoS attacks as entire files are read into memory and logged
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax
Apache Jackrabbit vulnerable to blind XXE attack due to insecure document build
Apache Zeppelin exposes server resources to unauthenticated attackers
ExecuTorch vulnerable to Heap-based Buffer Overflow attack
Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs
Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits
Jenkins Warrior Framework Plugin vulnerability exposes unencrypted passwords to certain authenticated users
Jenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users
Jenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users
Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form
Jenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users
Jenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form
Jenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token
Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens
Jenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials
Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file
Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens
Jenkins Testsigma Test Plan vulnerability exposes API keys via job configuration form
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.