Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersJenkins XebiaLabs XL Deploy Plugin vulnerable to Cross-site request forgery (CSRF)
Missing permission check in Jenkins XebiaLabs XL Deploy Plugin
Crash in HeaderParser in dicer
Cross Site Request Forgery in Jenkins Storable Configs Plugin
XML External Entity Reference in Jenkins Storable Configs Plugin
Missing permission check in Jenkins Blue Ocean Plugin
Cross Site Request Forgery in Jenkins Blue Ocean Plugin
Missing Authorization in Jenkins SSH plugin
Cross Site Request Forgery in Jenkins SSH Plugin
CSRF vulnerability in Jenkins Script Security Plugin
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; m
Apache MyFaces Cross-site Scripting vulnerability
Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient
Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
Unescaped parameters in the PostgreSQL JDBC driver
Improper Access Control in JBoss mod_cluster
User confusion in IronJacamar
Apache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1
Neo4J vulnerable to Cross-Site Request Forgery
Apache Ambari SSRF Vulnerability
Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation
Improper Input Validation in Apache Axis2
Improper Input Validation in OpenSymphony XWork
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.