Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
Improper Input Validation in Bouncy Castle
Jenkins allows Cross-Site Scripting (XSS)
Jenkins affected by Open Redirect Vulnerability
Jenkins allows HTTP Injection and Response Splitting
Jython Improper Access Restrictions vulnerability
XML External Entity Reference in Apache Cayenne
Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness
Mingsoft MCMS CSRF vulnerability
XWiki XSS Vulnerability
Arbitrary code execution in Apache Struts 2
Cross-site Scripting in Apache Struts
Arbitrary code execution in Apache Struts 2
Cross-site Scripting in Apache Struts
Apache Solr insecure inter-node communication
RubyGems Path Traversal vulnerability
Apache XML-RPC vulnerable to Deserialization of Untrusted Data
Apache XML-RPC XXE Vulnerability
Jenkins vulnerable to Cross-site Scripting
Apache Struts Code injection due to conversion error
Improper Input Validation in Apache Spark
Jenkins Cross-site Scripting vulnerability
Asset Pipeline plugin for Grails vulnerable to Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.