Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersPath Traversal in com.linecorp.armeria:armeria
Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocation
Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts
Deserialization of Untrusted Data in Spring AMQP
Incorrect Default Permissions in Apache JSPWiki
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Exposure of sensitive information in Apache Ozone
Incorrect Authorization in Apache Ozone
Apache Ozone exposes OM, SCM and Datanode metadata
Incorrect permissions in Apache Ozone
Improper Privilege Management in Apache Ozone
Incorrect Authorization in Apache Ozone
Apache Ozone user impersonation due to non-validation of Ozone S3 tokens
Incorrect Authorization in Apache Ozone
Code injection in spring-cloud-netflix-hystrix-dashboard
Unsafe Deserialization in jackson-databind
Improper Authentication in Apache ShenYu Admin
Critical vulnerability found in cron-utils
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Template injection in thymeleaf-spring5
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.