Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filtersKeycloak Vulnerable to Improper Validation of Specified Quantity in Input
Keycloak has Insufficient Session Expiration
Keycloak has an Out-of-bounds Read
Keycloak has an Authentication Bypass by Primary Weakness
Keycloak has an Improper Verification of Cryptographic Signature issue
Keycloak has a Time-of-check Time-of-use (TOCTOU) Race Condition
Keycloak Vulnerable to Incorrect Authorization
Keycloak Generates an Error Message Containing Sensitive Information
Keycloak Vulnerable to Improper Handling of Insufficient Permissions or Privilege
Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection
Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override
Jenkins Multijob Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins buildgraph-view Plugin does not escape the build URL
Jenkins Job Import Plugin does not perform a permission check in an HTTP endpoint
Jenkins GitHub Integration Plugin has a cross-site request forgery (CSRF) vulnerability
Jenkins Bitbucket OAuth Plugin does not restrict the redirect URL after login
Jenkins AppSpider Plugin does not perform a permission check in a method implementing form validation
Jenkins Credentials Binding Plugin does not properly sanitize file names for file and zip file credentials
Jenkins Active Directory Plugin deserializes data from LDAP referrals without validation
Jenkins Active Directory Plugin follows LDAP referrals by default
Jenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem
Jenkins LDAP Plugin deserializes data from LDAP referrals without validation
Jenkins LDAP Plugin follows LDAP referrals
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.