Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersXWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
Nacos Spring vulnerable to Unsafe Deserialization
Apache Ivy External Entity Reference vulnerability
Apache NiFi Insufficient Property Validation vulnerability
XWiki Platform privilege escalation (PR)/RCE from account through Invitation subject/message
OpenNMS privilege escalation vulnerability
PowerJob incorrect access control vulnerability
OpenNMS vulnerable to remote code execution
Jeecg-boot SQL Injection vulnerability
Jenkins Delphix Plugin missing permission check
Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials
Jenkins Config File Provider Plugin improper credential masking vulnerability
Jenkins NodeJS Plugin improper credential masking vulnerability
Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
Jenkins Docker Swarm Plugin stored cross-site scripting vulnerability
Jenkins Tuleap Authentication Plugin non-constant time token comparison
Jenkins Shortcut Job Plugin stored cross-site scripting vulnerability
Jenkins Flaky Test Handler Plugin stored cross-site scripting vulnerability
Jenkins Favorite View Plugin cross-site request forgery vulnerability
Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
Jenkins Blue Ocean Plugin cross-site request forgery vulnerability
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials
Jenkins Folders Plugin cross-site request forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.