Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersJMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data
Incomplete fix for Apache Log4j vulnerability
Cross-site Scripting in Apereo CAS
Remote code injection in Log4j (through pax-logging-log4j2)
Improper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit Oak
Unsafe Deserialization that can Result in Code Execution
Remote code injection in Log4j
Denial of Service (DoS) in Jackson Dataformat CBOR
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Unsafe Deserialization in jackson-databind
Serialization gadget exploit in jackson-databind
Serialization gadgets exploit in jackson-databind
Serialization gadgets exploit in jackson-databind
Code Injection in jackson-databind
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.