Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersMissing permission check in Jenkins SSH Plugin
Cross-site Scripting in Jenkins Rundeck Plugin
Missing Authorization in Jenkins WMI Windows Agents plugin
Path traversal in Jenkins Git Mercurial and Repo Plugins
Buffer overflow in Jenkins WMI Windows Agents plugin
Path traversal in Jenkins Mercurial Plugin
CSRF vulnerability in Jenkins Script Security Plugin
Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; m
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
jersey: XXE via parameter entities
JBoss KeyCloak Open Redirect
JBoss KeyCloak Cross-site Scripting Vulnerability
JBoss KeyCloak is vulnerable to soft token deletion via CSRF
Apache Struts is vulnerable to Cross-site Scripting
Apache Struts directory traversal vulnerability
Apache MyFaces Cross-site Scripting vulnerability
Dojo Open Redirect vulnerability
Improper Authentication in Apache MyFaces
Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP
Apache Struts Multiple XSS Vulnerabilities
Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient
OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.