Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersJenkins temporary uploaded file created with insecure permissions
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Jenkins temporary uploaded file created with insecure permissions
Jenkins Build Failure Analyzer Plugin missing permission check
Jenkins Cross-site Scripting vulnerability
Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
Quarkus HTTP vulnerable to incorrect evaluation of permissions
Improper Control of Generation of Code ('Code Injection') in jai-ext
Arbitrary File Overwrite in Eclipse JGit
Jetty's OpenId Revoked authentication allows one request
Jetty vulnerable to errant command quoting in CGI Servlet
Keycloak vulnerable to Plaintext Storage of User Password
OpenRefine Remote Code execution in project import with mysql jdbc url attack
OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack
hutool Buffer Overflow vulnerability
hutool Buffer Overflow vulnerability
hutool Buffer Overflow vulnerability
Jeecg boot arbitrary file read vulnerability
Jeecg boot SQL Injection vulnerability
WireMock Controlled Server Side Request Forgery vulnerability through URL
Jenkins Google Login Plugin non-constant time token comparison
Non-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.