Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache StreamPark: Authenticated system users could trigger SQL injection vulnerability
Multiple WSO2 products vulnerable to perform user impersonatoin using JIT provisioning
WSO2 API Manager allows attackers to change the API rating
WSO2 products vulnerable to XML External Entity attack
Bypass serialize checks in Apache Dubbo
Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Allocation of Resources Without Limits in Keycloak
Cross-site Scripting in JFinalcms
Cross-site Scripting in JFinalcms
Cross-site Scripting in JFinalcms
Cross-site Scripting in JFinalcms
Open redirect in Apache Shiro
Jenkins Nexus Platform Plugin missing permission check
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Jenkins Nexus Platform Plugin missing permission check
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Tokens stored in plain text by PaaSLane Estimate Plugin
Arbitrary file deletion vulnerability in Jenkins Scriptler Plugin
Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin
Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin
Tokens stored in plain text by PaaSLane Estimate Plugin
Cross-site request forgery vulnerability in Jenkins Deployment Dashboard Plugin
Cross-site request forgery vulnerability in Jenkins HTMLResource Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.