Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersImproper Restriction of XML External Entity Reference in iText
Improper Restriction of XML External Entity Reference in Apache Batik
Improper Restriction of Recursive Entity References in DTDs in Apache POI
Observable Discrepancy in BouncyCastle
Incorrect Authorization in Jenkins
Keycloak Improper Bruteforce Detection
Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow
Exposure of Sensitive Information to an Unauthorized Actor in Undertow
Insufficient Verification of Data Authenticity in Async Http Client
Insufficient Verification of Data Authenticity in Async Http Client
Apache Tomcat Unrestricted file upload vulnerability
Improper Authentication in Pivotal Spring-LDAP
OS Command Injection in Plexus-utils
Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain
Uncontrolled Resource Consumption in Artemis and HornetQ
Improper Certificate Validation in OkHttp
Loop with Unreachable Exit Condition in Netty
Smack allows the bypass of TLS protections
ActiveMQ's OpenWire protocol exposes certain system details as plain text
Apache Knox allows impersonation of users
Improper Neutralization of Input During Web Page Generation in Apache Sling
Improper Certificate Validation in Apache Commons HttpClient
Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.