Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersJenkins Deploy to container Plugin stored plain text passwords in job configuration
Cross-site Scripting in wicket-jquery-ui
Cross-site Scripting in wicket-jquery-ui
Improper Restriction of XML External Entity Reference in Apache uimaj
Ignite Realtime Openfire vulnerable to cross-site scripting
Apache Geode OQL method invocation vulnerability
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J
SimpleXML has XML External Entity (XXE) vulnerability
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
ClassLoader manipulation in Apache Struts
ClassLoader manipulation in Apache Struts
Arbitrary code execution in Apache Struts
ClassLoader manipulation in Apache Struts
Improper Control of Generation of Code in Apache Struts
ClassLoader manipulation in Apache Struts
Apache Struts vulnerable to arbitrary remote code execution due to improper input validation
Apache Struts RCE Vulnerability
Path Traversal in Apache Struts
Arbitrary code execution in Apache Struts 2
Jenkins Job Config History Plugin reflected XSS vulnerability
Apache Struts RCE Vulnerability
Apache XML Security For Java vulnerable to Infinite Loop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.