Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersApache Tomcat Uncontrolled Resource Consumption vulnerability
Welcome and About GeoServer pages communicate version and revision information
XWiki allows remote code execution through the extension sheet
http4k has a potential XXE (XML External Entity Injection) vulnerability
AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s
Ant-Media-Server vulnerable to Improper Output Neutralization for Logs
Keycloak proxy header handling Denial-of-Service (DoS) vulnerability
Keycloak Build Process Exposes Sensitive Data
Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path
Apache Tomcat - Authentication Bypass
Debezium database connector has a script injection vulnerability
Denial of Service attack on windows app using netty
powertac-server XML External Entity vulnerability
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
Undertow Denial of Service vulnerability
Snowflake JDBC Security Advisory
Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)
Butterfly has path/URL confusion in resource handling leading to multiple weaknesses
OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor
Eclipse Jetty URI parsing of invalid authority
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.