Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersCross-site Scripting in Jenkins SiteMonitor Plugin
CSRF vulnerability in Jenkins Job and Node ownership Plugin
Missing permission check in Jenkins Job and Node ownership Plugin
Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin
Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin
Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin
Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin
Missing permission Jenkins Pipeline Phoenix AutoTest Plugin
Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin
Arbitrary file read vulnerability in Jenkins Tests Selector Plugin
Improper Restriction of XML External Entity Reference in soa-model
Cross-site Scripting in Keycloak
Improper Certificate Validation in OWASP ZAP
Stored Cross-site Scripting in folder-auth plugin
RESTEasy 4.5.5.Final in hash flooding
Uncontrolled Resource Consumption in jboss-remoting
Code injection in Apache Dubbo
Deserialization of Untrusted Data in Apache Dubbo
Code injection in Apache Dubbo
Server-Side Request Forgery in Apache Dubbo
Deserializer tampering in Apache Dubbo
Permissions bypass in SmallRye
Authentication Bypass in keycloak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.