Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersEclipse Jetty's PushSessionCacheFilter can cause remote DoS attacks
Eclipse Jetty has a denial of service vulnerability on DosFilter
Gematik Referenzvalidator has an XXE vulnerability that can lead to a Server Side Request Forgery attack
Apache Seata Deserialization of Untrusted Data vulnerability
Path traversal vulnerability in functional web frameworks
XWiki Platform document history including authors of any page exposed to unauthorized actors
Keycloak Open Redirect vulnerability
Vertx gRPC server does not limit the maximum message size
Missing hostname validation in Kroxylicious
Apache SeaTunnel SQL Injection vulnerability
XWiki Platform allows XSS through XClass name in string properties
Apache MINA SSHD: integrity check bypass
Apache DolphinScheduler: RCE by arbitrary js execution
CometVisu Backend for openHAB has a path traversal vulnerability
CometVisu Backend for openHAB affected by SSRF/XSS
XXL-RPC Deserialization of Untrusted Data vulnerability
Redisson vulnerable to Deserialization of Untrusted Data
Apereo CAS vulnerable to credential leaks for LDAP authentication
Path traversal in Reposilite javadoc file expansion (arbitrary file creation/overwrite) (`GHSL-2024-073`)
Reposilite artifacts vulnerable to Stored Cross-site Scripting
Apache SeaTunnel Web Authentication vulnerability
Remote code execution in Spring Cloud Data Flow
DNSJava DNSSEC Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.