Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersOpenDJ Denial of Service (DoS) using alias loop
WSO2 incorrect authorization vulnerability
Kwik hash collision vulnerability
Apache Ignite: Possible RCE when deserializing incoming messages by the server node
GeoNetwork search end-point information disclosure in response headers
Apache James vulnerable to denial of service through JMAP HTML to text conversion
Keycloak on Quarkus CLI option for encrypted JGroups ignored
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
WildFly improper RBAC permission
Apache Wicket: An attacker can intentionally trigger a memory leak
Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL
Apache Ranger UI vulnerable to Server Side Request Forgery
Apache CXF: Denial of Service vulnerability with temporary files
HAL Console has a Cross Site Scripting (XSS) vulnerability of user input
Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability
Denial of Service in Keycloak Server via Security Headers
Keycloak allows unrestricted admin use of system and environment variables
Amazon Redshift JDBC Driver vulnerable to SQL Injection
Apache MINA Deserialization RCE Vulnerability
Apache HugeGraph-Server: Fixed JWT Token (Secret)
Cross Site Scripting (XSS) vulnerability while uploading content to a new deployment
Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails
QOS.CH logback-core Server-Side Request Forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.