Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJupiter allows attackers to execute arbitrary commands via sending a crafted RPC request
OpenSearch StackOverflow vulnerability
RuoYi vulnerable to SQL injection vulnerability
Apache Tiles: Unvalidated input may lead to path traversal and XXE
Eclipse IDE XXE in eclipse.platform
Apache Cocoon Improper Restriction of XML External Entity Reference vulnerability
Apache Cocoon SQL Injection vulnerability
Apache DolphinScheduler Missing Authorization vulnerability
Keycloak vulnerable to LDAP Injection on UsernameForm Login
Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
Jenkins MATLAB Plugin XML External Entity vulnerability
Jenkins Google Compute Engine Plugin has incorrect permission checks
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
Jenkins MATLAB Plugin missing permission checks
Jenkins MATLAB Plugin cross-site request forgery vulnerability
logback serialization vulnerability
Apache Tomcat Improper Input Validation vulnerability
Apache ActiveMQ Deserialization of Untrusted Data vulnerability
ureport arbitrary file read vulnerability
Reactor Netty HTTP Server denial of service vulnerability
Spring Framework vulnerable to denial of service
Spring Boot Actuator denial of service vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.