Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersJenkins cross-site scripting (XSS) vulnerability
Improper Restriction of XML External Entity Reference in Apache POI
Jenkins Path Traversal vulnerability
Authentication Bypass in Apache Tomcat
Jenkins HttpOnly flag not Set for session cookies
Jenkins secure flag not set on session cookies
Deserialization of Untrusted Data in Apache Brooklyn
Apache Geode gfsh query vulnerability
Improper Restriction of XML External Entity Reference in Jelly
Jenkins Poll SCM Plugin vulnerable to Cross-Site Request Forgery
Exposure of Sensitive Information in Jenkins Datadog plugin
Persistent XSS vulnerability in Jenkins OWASP Dependency-Check Plugin
Apache Wicket vulnerable to CSRF attacks
Persistent XSS vulnerability in Static Analysis Utilities
Persistent XSS vulnerability in Jenkins DRY Plugin
Jenkins Subversion Plugin Cross-Site Request Forgery vulnerability
Improper Restriction of XML External Entity Reference in Apache OpenNLP
Insufficient Data Verification in io.really:jwt-scala
XML External Entity Reference in Apache NiFi
Injection in Apache NiFi
Ignite Realtime Openfire Server has Cross-site Scripting vulnerability in admin console
nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate
Password change doesn't result in Karaf clearing cache
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.