Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersCross-Site Request Forgery in Jenkins PaaSLane Estimate Plugin
Missing permission check in Jenkins PaaSLane Estimate Plugin
Tokens stored in plain text by Dingding JSON Pusher Plugin
Displayed in plain text by Dingding JSON Pusher Plugin
Cross Site Request Forgery in Silverpeas
Cross-site Scripting in silverpeas
Broken access control in Silverpeas
Broken access control in Silverpeas
Cross Site Request Forgery in Silverpeas
Missing access control in Silverpeas
Broken access control in Silverpeas
Broken access control in Silverpeas
Improper JWT Signature Validation in SAP Security Services Library
Alkacon OpenCMS XSS via Mercury template
Directory Traversal in JFinalCMS
Authorization bypass in Quarkus
Cross-site Scripting in JFinalCMS
Cross-site Scripting in JFinalCMS
Cross-site Scripting in JFinalCMS
Apache Struts vulnerable to path traversal
Quarkus Cache Runtime exposes sensitive information to an unauthorized actor
pubnub Insufficient Entropy vulnerability
Data leak of password hash through change requests
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.