Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy
Jenkins OpenID Plugin CSRF vulnerability
Cross-site request forgery vulnerability in Jenkins Nomad Plugin
CSRF vulnerability in Jenkins SOASTA CloudTest Plugin
Cross site scripting in Apache Sling
MAGMI cross-site scripting (XSS)
MAGMI plugin for Magento Server Directory Traversal
Deserialization of Untrusted Data in Jython
Improper Input Validation in Apache Struts
Deserialization of Untrusted Data in Apache commons collections
Improper Input Validation in Apache Struts
Deserialization of Untrusted Data in Groovy
Apache MyFaces Trinidad Deserialization Vulnerability
Improper Authentication in Apache Kafka
Missing permission check in Jenkins Gearman Plugin
Missing permission check in Jenkins VMware Lab Manager Slaves Plugin
Missing permission check in Jenkins SOASTA CloudTest Plugin
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Missing permission check in Jenkins sinatra-chef-builder Plugin
Jenkins Nomad Plugin missing permission check
Jenkins Crowd Integration Plugin stores credentials in plain text
Jenkins openid Plugin missing permission check
Jenkins Zephyr Enterprise Test Management Plugin missing permission check
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.