Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersImproper Input Validation in Parquet-MR
RCE in H2 Console
Hash collision in typelevel jawn
Insertion of Sensitive Information into Log File in Apache Geode
Apache Solr Improper Input Validation and Path Traversal
Inadequate Encryption Strength in Apache NiFi
Missing Authentication for Critical Function in Apache NiFi
Insertion of Sensitive Information into Log File in Apache NiFi Stateless
Improper Restriction of XML External Entity Reference in Apache NiFi
Insertion of Sensitive Information into Log File in Apache NiFi
Apache NiFi Insertion of Sensitive Information into Log File
Server-side request forgery (SSRF) in Apache Batik
Cross-site scripting in Apache NiFi
Cross-site Scripting (XSS) in Apache Ambari Views
Sandbox Bypass in Apache Velocity Engine
Cross-Site Request Forgery in com.softwaremill.akka-http-session:core_2.12
Improper Certificate Validation in Apache IoTDB
Deserialization of Untrusted Data in Apache Heron
Cross-site scripting in Apache Syncome EndUser
Stored XSS vulnerability in Jenkins Scriptler Plugin
Stored XSS vulnerability in Jenkins Scriptler Plugin
ReDOS in Vfsjfilechooser2
Infinite loop in Apache CFX
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.