Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Moderate severity vulnerability that affects org.apache.ignite:ignite-core
Apache Ignite communicates to an external PHP server where sensitive information is sent
Moderate severity vulnerability that affects apache axis
Improper Validation of Certificates in apache axis
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv
Improper Certificate Validation in Microsoft .NET Framework components
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core
OPC UA applications can allow a remote attacker to determine a Server's private key
Denial of service in ASP.NET Core
ASP.NET Core fails to properly validate web requests
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
High severity vulnerability that affects Microsoft.AspNetCore.Mvc
ASP.NET Core allow an elevation of privilege
Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated
Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
Moderate severity vulnerability that affects org.apache.qpid:proton-j
Improper Input Validation in org.apache.qpid:qpid-broker
AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.