Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersMissing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials
Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials
Improper Privilege Management in Spring Framework
XML external entity vulnerability in Jenkins Nuget Plugin
DNS based denial of service in Apache Wicket
XSS vulnerability in Jenkins Markdown Formatter Plugin
XXE vulnerability in Jenkins Filesystem Trigger Plugin
XXE vulnerability in Jenkins URLTrigger Plugin
OpenNMS Horizon vulnerable to XSS
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page
Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password
Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App
Liferay Portal and Liferay DXP Fails to Check Permissions
Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via Categories Admin Page
Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use
Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module
JBoss EJB Client information disclosure vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.