Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 85
Reset filtersPasswords stored in plain text by Jenkins Artifactory Plugin
PicketLink does not properly check role based authorization
Jenkins Warnings Next Generation Plugin cross-site request forgery vulnerability
XSS vulnerability in Jenkins Warnings Next Generation Plugin
pgjdbc Arbitrary File Write Vulnerability
Path Traversal in Jenkins Warnings Next Generation Plugin
Hash collision in typelevel jawn
XSS in `*Text` options of the Datepicker widget in jquery-ui
Cryptographically weak CSRF tokens in Apache MyFaces
Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources
Key Caching behavior in the DynamoDB Encryption Client.
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.