Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Uncontrolled Resource Consumption in Apache OpenMeetings server
Code injection in Apache Druid
Improper Authentication in Apache ActiveMQ and Apache Artemis
Apache ActiveMQ Artemis vulnerable to Improper Access Control
Improper Restriction of Recursive Entity References in Apache XMLBeans
Arbitrary code injection in json-sanitizer
Remote code execution in Apache Tapestry
Origin Validation Error in Apache Maven
Cryptographically weak CSRF tokens in Apache MyFaces
Cross-Site Request Forgery in the Jenkins Claim plugin
Missing Authorization in Jenkins P4 plugin
Missing Authorization in jenkins xray-connector
Missing Authorization in Jenkins S3 publisher Plugin
Missing Authorization in Jenkins S3 publisher Plugin
CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin allows capturing credentials
Cross-site Scripting in Jenkins Dashboard View Plugin
Cross-Site Request Forgery in Jenkins Credentials Plugin
Improper Authentication in Atlassian Connect Spring Boot
Uncontrolled Resource Consumption in JPA Server in HAPI FHIR
Shell command injection in Apache Syncope
Expression Language Injection in Apache Syncope
Injection in Apache Syncope
Command injection in Apache Unomi
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.