Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filterssnappy-java's Integer Overflow vulnerability in shuffle leads to DoS
Guava vulnerable to insecure use of temporary directory
Jenkins CSRF protection bypass vulnerability
Jenkins Digital.ai App Management Publisher Plugin vulnerable to Cross-Site Request Forgery
Arbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin
Jenkins Digital.ai App Management Publisher Plugin missing permission checks
Apache Struts vulnerable to memory exhaustion
Apache Struts vulnerable to memory exhaustion
Insecure Temporary File in HuTool
Druid ingestion system Authenticated users can read data from other sources than intended
GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language
xxl-rpc deserialization vulnerability
JStachio XSS vulnerability: Unescaped single quotes
DataEase API interface has IDOR vulnerability
Spring Boot Welcome Page Denial of Service
Apache JSPWiki vulnerable to cross-site scripting on several plugins
Insecure Default Initialization In Liferay Portal
SQL injection in Liferay Portal
Cross-site scripting in Liferay Portal
Cross-site scripting in Liferay Portal
Administration Console authentication bypass in openfire xmppserver
Jenkins Azure VM Agents Plugin missing permission checks
Jenkins Ansible Plugin stores and displays secrets in plain text
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.