Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersImproper Limitation of a Pathname to a Restricted Directory in Zip4j
Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver
Keycloak Authentication Error
Keycloak Open Redirect
Keycloak vulnerable to cross-site scripting via the state parameter
Cloud Foundry UAA Privilege Escalation
Improper Restriction of XML External Entity Reference in Elasticsearch
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider
Uncontrolled Resource Consumption in Undertow
Deserialization of Untrusted Data in Infinispan
Cross-site Scripting in Pivotal Spring Batch Admin
Elasticsearch subject to cross site scripting
Cross-site Scripting in Jenkins Blue Ocean Plugin
Jenkins Config File Provider Plugin XSS vulnerability
Jenkins Warnings Next Generation Plugin cross-site request forgery vulnerability
Jenkins Active Directory Plugin Improper certificate validation with StartTLS
Sandbox Bypass via CSRF in Jenkins Warnings Plugin
Cross-Site Request Forgery in Jenkins Blue Ocean Plugin
GitHub Authentication Plugin showed plain text client secret in configuration form
XXE vulnerability in Jenkins Job Import Plugin
Jenkins Job Import Plugin CSRF vulnerability
Jenkins Mattermost Notification Plugin vulnerable to SSRF
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.