Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersEclipse Jetty affected by MadeYouReset HTTP/2 vulnerability
Apache EventMesh Vulnerable to Server-Side Request Forgery in WebhookUtil.java
Spring Framework MVC Applications Path Traversal Vulnerability
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery
Apache Seata: Deserialization of untrusted Data in Apache Seata Server
Apache Zeppelin: Missing Origin Validation in WebSockets vulnerability
Apache Jena allows users with administrator access to create databases files outside the files area of the Fuseki server
XXL-JOB is vulnerable to SSRF attacks
Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
DSpace is vulnerable to Path Traversal attacks when importing packages using Simple Archive Format
DSpace is vulnerable to XML External Entity injection during archive imports
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
Apache Zeppelin exposes server resources to unauthenticated attackers
Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form
Jenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form
Jenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token
Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens
Jenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials
Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file
Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens
Jenkins Testsigma Test Plan vulnerability exposes API keys via job configuration form
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.