Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache Tika vulnerable to uncontrolled memory consumption
Crafter CMS Crafter Studio vulnerable to Improper Control of Dynamically-Managed Code Resources
Log value insertion in craftercms
Improper Privilege Management in craftercms
Cross-site Scripting in Jenkins Core
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
XML External Entity Reference in org.picketlink:picketlink-common
Jenkins has CRLF Injection Vulnerability in the CLI
Jenkins allows Execution of Code by Opening a JRMP Listener
Exposure of Sensitive Information in Jenkins Core
Jenkins allows Deserialization of Untrusted Data via an XML File
Exposure of Sensitive Information in Jenkins Core
Jenkins allows Remote Users to Inject Build Parameters
Exposure of Sensitive Information in Jenkins Core
Jenkins Exposes Sensitive Information from Job Configuration
Jenkins affected by Open Redirect Vulnerability
Missing permissions check in Jenkins Core
Incorrect Authorization in Jenkins Core
Jenkins Exposes Sensitive Information via API URL
Apache Sling Authentication Service vulnerability
Apache Drill vulnerable to Cross-site Scripting
Improper Input Validation in Apache Tomcat
Arbitrary file write in Apache Commons Fileupload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.