Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtershsweb-framework has an open redirect issue
hsweb-framework has a Path Traversal issue
Keycloak: Information disclosure due to user profile permission bypass
Apache Fory Java SDK Has Deserialization of Untrusted Data in the Java replace-resolve path
epa4all-client: Unauthenticated REST API for Patient Record Writes
Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass
Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes
Spring Cloud Function Context has Uncontrolled Recursion
Spring Cloud Function Context: Uncontrolled Recursion is possible while attempting to add infinite amount of functions to Function Registry
Logback vulnerable to Object Injection through HardenedObjectInputStream modules
Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability
Apache MINA SSHD bundle sshd-git has a path traversal vulnerability
Apache ActiveMQ server has an incomplete authorization workflow
Apache ActiveMQ has an Incorrect Default Permissions vulnerability
Apache Fluss: Unauthenticated remote attackers can exhaust JVM heap memory using crafted frame headers via TabletServer/CoordinatorServer
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
Apache Solr has hardcoded credentials in the Basic Authentication setup tool
Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue
Apache Directory LDAP API lacks server certificate verification for LDAP hostnames
CC-Tweaked has an SSRF Protection Bypass with NAT64
Apache Artemis has an Incorrect Authorization issue
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.