Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersSSRF vulnerability using the Aegis DataBinding in Apache CXF
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
In Quarkus, git credentials could be inadvertently published
Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution
Apache Pulsar: Improper Authorization For Topic-Level Policy Management
Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint
Apache Pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS Proxying
Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification
nGrinder vulnerable to unsafe Java objects deserialization
Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default
Jenkins Delphix Plugin has improper SSL/TLS certificate validation
Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting
Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability
Jenkins Subversion Partial Release Manager Plugin missing permission check
Jenkins docker-build-step Plugin missing permission check
Jenkins MQ Notifier Plugin exposes sensitive information in build logs
Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting
Jenkins AppSpider Plugin missing permission checks
Jenkins OWASP Dependency-Check Plugin has stored XSS vulnerability
Jenkins HTML Publisher Plugin does not properly sanitize input
Jenkins HTML Publisher Plugin Stored XSS vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.