Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filtersPath traversal in Hadoop
XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin
enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability
Path Traversal in Spring-integration-zip
Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin
Improper Restriction of XML External Entity Reference in Any23
XML External Entity Reference in Hazelcast
Allocation of Resources Without Limits or Throttling in metadata-extractor
Improper Handling of Exceptional Conditions inn metadata-extractor
CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE
Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE
Improper Restriction of XML External Entity Reference in Jenkins Chef Sinatra
Path traversal in xwiki-platform-skin-skinx
Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive
Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares
Denial of Service in Apache James
Inadequate Encryption Strength in Apache NiFi
Remote code injection in Log4j
Files Accessible to External Parties in Opencast
Opencast publishes global system account credentials
HTTP Method Spoofing
Apache Log4j Remote Code Execution
Remote code injection in Log4j
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.