Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersStored XSS vulnerability in Jenkins Publish Over SSH Plugin
Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows retrieving all credentials
Missing permission check in Jenkins Publish Over SSH Plugin
CSRF vulnerability and missing permission checks in Jenkins Publish Over SSH Plugin
Path traversal vulnerability in Jenkins Publish Over SSH Plugin
Password stored in plain text by Jenkins Publish Over SSH Plugin
CSRF vulnerability in Jenkins batch task Plugin
Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets
Agent-to-controller security bypass in Jenkins Debian Package Builder Plugin
Log entry injection in Spring Framework
Deserialization of Untrusted Data in Dubbo
Cross-site Scripting in Apache Pluto
Cross-site Scripting in Apache Pluto
Cross-site Scripting in Apache Pluto
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.
Use of Hard-coded Credentials in Apache Kylin
Server-Side Request Forgery in Apache Kylin
SQL Injection in Apache Kylin
Kylin can receive user input and load any class through Class.forName(...).
Command Injection in Apache Kylin
Infinite Loop in Apache James
Command Injection in Apache James
Denial of Service in Apache James
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.