Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 546
Reset filtersKeycloak Authentication Error
Missing permission check in Jenkins Avatar Plugin
Jenkins Gitlab Authentication Plugin Open Redirect vulnerability
Missing Authorization in Jenkins WMI Windows Agents plugin
Buffer overflow in Jenkins WMI Windows Agents plugin
Improper Link Resolution Before File Access in Apache Hadoop
Apache Ambari Open Redirect
Open redirect in Apache Struts
Apache Tomcat Allows Replacing of XML Parser
Apache Wicket vulnerable to CSRF attacks
Password change doesn't result in Karaf clearing cache
Race Condition in Jenkins
Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials
Jenkins HTML Publisher Plugin path traversal vulnerability
Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness
Directory Traversal in Apache Tomcat
Cross-Site Request Forgery in Jenkins
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
RubyGems Improper Verification of Cryptographic Signature vulnerability
Incorrect Authorization in Jenkins
RubyGems Infinite Loop vulnerability
Use after free in Apache Mesos
Cross-Site Request Forgery in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.