Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filtersH2O Vulnerable to Arbitrary File Overwrite via File Export
H2O Vulnerable to Execution of Arbitrary Files
H2O Vulnerable to Denial of Service (DoS) and File Write
H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
H2O Deserialization of Untrusted Data Vulnerability
The WikiManager REST API allows any user to create wikis
XWiki allows unregistered users to access private pages information through REST endpoint
XWiki uses the wrong wiki reference in AuthorizationManager
Jenkins AnchorChain Plugin Has a Cross-Site Scripting (XSS) Vulnerability
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims
LocalS3 XML Parser Vulnerable to XML External Entity (XXE) Injection
LocalS3 Project Vulnerable to XML External Entity (XXE) Injection via Bucket Tagging API
LocalS3 Project Bucket Operations Vulnerable to XML External Entity (XXE) Injection
LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection
Apache Camel: Camel Message Header Injection via Improper Filtering
com.xwiki.confluencepro:application-confluence-migrator-pro-ui's application homepage is public
Jenkins cross-site request forgery (CSRF) vulnerability
Jenkins Open Redirect vulnerability
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Emissary May Use a Broken or Risky Cryptographic Algorithm
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.