High
CVE-2024-23683
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 547
Reset filters
Critical
ghsa-v57x-gxfj-484q
Security Advisory for "Log4Shell"
Medium
CVE-2022-21700
Memory leak in micronaut-core
Medium
CVE-2021-38542
Command Injection in Apache James
High
CVE-2020-1952
Improper Certificate Validation in Apache IoTDB
Critical
ghsa-3qpm-h9ch-px3c
Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library
High
CVE-2020-35209
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.
High
CVE-2020-35211
An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.
High
CVE-2018-16153
Opencast publishes global system account credentials
Critical
CVE-2021-43570
Improper Verification of Cryptographic Signature in starkbank-ecdsa
High
ghsa-9wx7-jrvc-28mm
Signature verification vulnerability in Stark Bank ecdsa libraries
Medium
CVE-2021-39194
Improper Handling of Missing Values in kaml
Medium
CVE-2021-39140
XStream can cause a Denial of Service
Critical
CVE-2021-37578
Deserialization of Untrusted Data in Apache jUDDI
High
CVE-2021-33900
Missing encryption in Apache Directory Studio
Medium
CVE-2021-36373
Improper Handling of Length Parameter Inconsistency in Apache Ant
High
CVE-2021-35517
Improper Handling of Length Parameter Inconsistency in Compress
High
CVE-2021-32769
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core
Medium
CVE-2021-29480
Ratpack's default client side session signing key is highly predictable
Medium
CVE-2021-29481
Unencrypted storage of client side sessions
Critical
CVE-2021-29485
Remote Code Execution Vulnerability in Session Storage
High
CVE-2020-12642
XXE vulnerability in Launch import
High
CVE-2021-29620
XXE vulnerability on Launch import with externally-defined DTD file
High
CVE-2021-32623
Billion laughs attack (XML bomb)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.