Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filtersJenkins Dynatrace Plugin contains Incorrect Default Permissions
Jenkins Dynatrace Plugin vulnerable to Cross-Site Request Forgery
Jenkins 360 FireLine Plugin vulnerable to XML External Entity Reference
OHDSI WebAPI vulnerable to SQL Injection
Improper Restriction of XML External Entity Reference Jenkins Token Macro Plugin
Sandbox bypass in ontrack Jenkins Plugin
Cross Site Request Forgery in Jenkins Storable Configs Plugin
XML External Entity Reference in Jenkins Storable Configs Plugin
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
Apache Sling Auth Core bundle vulnerable to Open Redirection
PicketLink does not properly check role based authorization
Apache OpenMeetings displays Tomcat version and detailed error stack trace
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling
Improper Access Control in Apache Tomcat
Persistent XSS vulnerability in Static Analysis Utilities
Denial of service in Apache Tomcat
Regular expression denial of service in apache tika
XXE vulnerability in Jenkins PMD Plugin
XXE vulnerability in Jenkins DRY Plugin
XXE vulnerability in Jenkins Checkstyle Plugin
XML External Entity Reference in Jenkins FindBugs Plugin
XXE vulnerability Jenkins Warnings Plugin
Improper Restriction of XML External Entity Reference in Jenkins JUnit Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.