Critical
CVE-2026-54617
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filters
High
CVE-2026-48048
XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests
Low
CVE-2026-9370
jasypt-spring-boot Uses a One-Way Hash without a Salt
Critical
CVE-2026-45091
sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)
High
CVE-2025-68703
Jervis's Salt for PBKDF2 derived from password
Medium
CVE-2025-68113
ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay
High
CVE-2025-54125
XWiki exposes passwords and emails stored in fields not named password/email in xml.vm
Low
CVE-2024-56128
Apache Kafka's SCRAM implementation Incorrectly Implements Authentication Algorithm
Medium
CVE-2024-29120
Apache StreamPark: Information leakage vulnerability
High
CVE-2023-50719
Solr search discloses password hashes of all users
High
CVE-2022-36091
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
Medium
CVE-2022-22976
Integer overflow in BCrypt class in Spring Security
Medium
CVE-2018-1999027
Jenkins SaltStack Plugin allows attackers to capture credentials with a known credentials ID stored in Jenkins
Low
CVE-2015-5318
Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack
Low
CVE-2020-5229
Password Hashing: Do not use MD5
Medium
CVE-2019-0201
Access control bypass in Apache ZooKeeper
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.