Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersWildFly Elytron: OIDC app attempting to access the second tenant, the user should be prompted to log
Apache Zeppelin: LDAP search filter query Injection Vulnerability
Apache Zeppelin remote code execution by adding malicious JDBC connection string
Apache Zeppelin vulnerable to cross-site scripting in the helium module
Improper escaping in Apache Zeppelin
Apache Zeppelin: Cron arbitrary user impersonation with improper privileges
google-oauth-java-client improperly verifies cryptographic signature
Apache Zeppelin: Denial of service with invalid notebook name
Apache Zeppelin: Replacing other users notebook, bypassing any permissions
Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE
Eclipse Kura LogServlet vulnerability
Apache Zeppelin CSRF vulnerability in the Credentials page
Apache Zeppelin Path Traversal vulnerability
WildFly Elytron: SSRF security issue
Xuxueli xxl-job template injection vulnerability
quarkus-core leaks local environment variables from Quarkus namespace during application's build
Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints
Eclipse Vert.x vulnerable to a memory leak in TCP servers
Bonita cross-site scripting vulnerability
Elasticsearch Uncaught Exception leading to crash
Elasticsearch Incorrect Authorization vulnerability
Elasticsearch Uncontrolled Resource Consumption vulnerability
Eclipse Vert.x memory leak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.