Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersCrateDB database has an arbitrary file read vulnerability
CrateDB authentication bypass vulnerability
Apache Kylin has Insufficiently Protected Credentials
Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
Path traversal vulnerability in Jenkins Matrix Project Plugin
Arbitrary file read vulnerability in Jenkins Log Command Plugin
Arbitrary file read vulnerability in Git server Plugin can lead to RCE
CSRF vulnerability in Jenkins GitLab Branch Source Plugin
Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin
Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin
Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin
Cross-site Scripting in JFinal
Remote Command Execution in SOFARPC
Cross-site Scripting in beetl-bbs
Cross-site Scripting in JFinal
keycloak-core: open redirect via "form_post.jwt" JARM response mode
Spring Framework server Web DoS Vulnerability
Clojure classes can be used to craft a serialized object that runs arbitrary code on deserialization
nvdApiKey is logged in debug mode
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
Stored Cross Site Scripting in beetl-bbs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.