Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filtersJenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference
Apache Geode configuration request authorization vulnerability
Reflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin
Deserialization of Untrusted Data in Apache OpenJPA
Jenkins TraceTronic ECU-TEST Plugin Man in the middle vulnerability
Jenkins TraceTronic ECU-TEST Plugin server-side request forgery vulnerability
Jenkins Resource Disposer Plugin allows attacker to stop tracking specified resource
Improper Limitation of a Pathname to a Restricted Directory in WildFly
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Path Traversal in io.hawt:project
Improper Limitation of a Pathname to a Restricted Directory in Zip4j
Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver
Improper Limitation of a Pathname to a Restricted Directory in zt-zip
Improper Access Control in Apache Tomcat
Jenkins Ansible Plugin man in the middle vulnerability
Jenkins Trac Publisher Plugin stores credentials in plain text
Script security sandbox bypass in Jenkins Job DSL Plugin
Jenkins youtrack-plugin Plugin stored credentials in plain text
Script security sandbox bypass in Jenkins Email Extension Plugin
Deserialization of Untrusted Data in Apache Batik
spring-integration-zip Arbitrary File Write
Cross-Site Request Forgery in Jenkins
Path Traversal in com.alibaba.oneagent:one-java-agent-plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.