Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache Johnzon Deserialization of Untrusted Data vulnerability
Apache Cassandra: Privilege escalation when enabling FQL/Audit logs
Apache RocketMQ may have remote code execution vulnerability when using update configuration function
Apache InLong has Weak Password Requirements in Apache InLong
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
Apache InLong Improper Privilege Management vulnerability
Apache InLong Deserialization of Untrusted Data Vulnerability
Apache InLong Exposure of Resource to Wrong Sphere vulnerability
Apache InLong Incorrect Permission Assignment for Critical Resource Vulnerability
Apache InLong has Files or Directories Accessible to External Parties
Apache InLong vulnerable to Incorrect Permission Assignment for Critical Resource
Apache InLong has Files or Directories Accessible to External Parties in Apache InLong
Apache InLong Exposure of Resource to Wrong Sphere vulnerability
Apache InLong Insufficient Session Expiration vulnerability
Apache OpenMeetings insufficient authorization vulnerability
Apache Ranger code execution vulnerability in policy expressions
Graylog server has partial path traversal vulnerability in Support Bundle feature
Graylog vulnerable to insecure source port usage for DNS queries
Graylog user session is still usable after logout
Apache StreamPark Path Traversal vulnerability
Apache StreamPark Improper Input Validation vulnerability
Apache InLong SQL Injection vulnerability
Apache Linkis Unrestricted File Upload vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.