Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersDeep Java Library path traversal issue
Snowflake JDBC uses insecure temporary credential cache file permissions
Snowflake JDBC allows an untrusted search path on Windows
RuoYi has insecure permissions
RuoYi vulnerable to Denial of Service by attackers with admin privileges
RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring
Apache Hive Incorrectly Assigns Permissions for a Critical Resource
Infinispan vulnerable to Insertion of Sensitive Information into Log File
Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing
Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator
Apache Solr Relative Path Traversal vulnerability
Apache Solr vulnerable to Execution with Unnecessary Privileges
HL7 FHIR IG Publisher potentially exposes GitHub repo user and credential information
XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`
Apache Wicket: An attacker can intentionally trigger a memory leak
Cross site scripting in Silverpeas Core
Missing permission checks in Jenkins Azure Service Fabric Plugin
Disabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin
CSRF vulnerability in Jenkins Azure Service Fabric Plugin
Cache confusion in Jenkins Eiffel Broadcaster Plugin
Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.