Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins HTML Publisher Plugin Path traversal vulnerability
Jenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery
Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting
Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged
Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability
Apache Archiva Reflected Cross-site Scripting vulnerability
Apache Archiva Incorrect Authorization vulnerability
Apache Archiva Incorrect Authorization vulnerability
Apache Ambari: Various Cross site scripting problems
Reading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of service
jose4j denial of service via specifically crafted JWE
Missing permission checks on Hazelcast client protocol
Apache James MIME4J improper input validation vulnerability
Apache Ambari XML External Entity injection
SMTP smuggling in Apache James
Apache Ambari: authenticated users could perform command injection to perform RCE
Apache James server: Privilege escalation via JMX pre-authentication deserialization
Connection leaking on idle timeout when TCP congested
SAML authentication bypass due to missing validation on unsigned SAML messages
Armeria SAML authentication bypass due to missing validation on unsigned SAML messages
Apache Camel data exposure vulnerability
Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.