Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersIgnite Realtime Openfire privilege escalation vulnerability
Netty's HttpPostRequestDecoder can OOM
XNIO denial of service vulnerability
Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree
Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()
SQL injection in Folio Spring Module Core
Improper Authentication in Spring Authorization Server
GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's MapML HTML Page vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's WMS OpenLayers Format vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's GWC Seed Form vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's Simple SVG Renderer vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer's Style Publisher vulnerable to Stored Cross-Site Scripting (XSS)
GeoServer Arbitrary file renaming vulnerability in REST Coverage/Data Store API
Stored Cross-Site Scripting (XSS) vulnerability in GeoServer's REST Resources API
Arbitrary file upload vulnerability in GeoServer's REST Coverage Store API
GeoServer log file path traversal vulnerability
Cross-Site Request Forgery in Apache Wicket
Improper Input Validation vulnerability in Apache Hop Engine
Path traversal in flaskcode Devan-Kerman ARRP
Erroneous authentication pass in Spring Security
FitNesse Cross-site Scripting vulnerability
FitNesse allows execution of arbitrary OS commands
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.