Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersKeycloak exposes sensitive information in Pushed Authorization Requests (PAR)
Weak encryption in Ninja Core
BoringSSLAEADContext in Netty Repeats Nonces
iq80 Snappy out-of-bounds read when uncompressing data, leading to JVM crash
Silverpeas authentication bypass
Decompressors can crash the JVM and leak memory content in Aircompressor
OpenCMS Cross-Site Scripting vulnerability
OpenAPI Generator Online - Arbitrary File Read/Delete
Soot Infinite Loop vulnerability
Kwik does not discard unused encryption keys
Jenkins Report Info Plugin Path Traversal vulnerability
Eclipse Ditto vulnerable to Cross-site Scripting
Silverpeas Core vulnerable to Cross Site Scripting
veraPDF has potential XSLT injection vulnerability when using policy files
Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability
Amazon JDBC Driver for Redshift SQL Injection via line comment generation
Ant Media Server does not properly authorize non-administrative API calls
Apache Karaf Cave: Cave SSRF and arbitrary file access
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
Genie Path Traversal vulnerability via File Uploads
Apache Inlong Deserialization of Untrusted Data vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.