Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersJenkins Filesystem List Parameter Plugin has Path Traversal vulnerability
Jenkins Simple Queue Plugin has stored cross-site scripting (XSS) vulnerability
sigstore-java has vulnerability with bundle verification
Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination
Keycloak proxy header handling Denial-of-Service (DoS) vulnerability
Keycloak Build Process Exposes Sensitive Data
Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path
org.keycloak:keycloak-services has Inefficient Regular Expression Complexity
Searching Opencast may cause a denial of service
Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider
Graylog concurrent PDF report rendering can leak other users' reports
Apache Tomcat - XSS in generated JSPs
Apache Tomcat - Authentication Bypass
Apache Tomcat Request and/or response mix-up
Spring MVC controller vulnerable to a DoS attack
Undertow incorrectly parses cookies
Debezium database connector has a script injection vulnerability
FitNesse Cross-site scripting
FitNesse Path Traversal
Missing permission check in Jenkins Script Security Plugin
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Stored XSS vulnerability in Jenkins Authorize Project Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.