Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersGeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's GWC Seed Form vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer Arbitrary file renaming vulnerability in REST Coverage/Data Store API
Stored Cross-Site Scripting (XSS) vulnerability in GeoServer's REST Resources API
Arbitrary file upload vulnerability in GeoServer's REST Coverage Store API
GeoServer log file path traversal vulnerability
Improper Input Validation vulnerability in Apache Hop Engine
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
Jenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests
Apache Ambari XML External Entity injection
SMTP smuggling in Apache James
Apache James server: Privilege escalation via JMX pre-authentication deserialization
Connection leaking on idle timeout when TCP congested
SAML authentication bypass due to missing validation on unsigned SAML messages
Armeria SAML authentication bypass due to missing validation on unsigned SAML messages
Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
org.postgresql:postgresql vulnerable to SQL Injection via line comment generation
Improper Certificate Validation in Apache DolphinScheduler
Undertow Uncontrolled Resource Consumption Vulnerability
Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.