Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersXStream is vulnerable to an Arbitrary Code Execution attack
Uncaught Exception in jsoup
Timing based private key exposure in Bouncy Castle
Padding oracle attacks
Cross-site scripting in jfinal
XML External Entity Reference
Cross-site scripting in Apache Jena Fuseki
Authentication Bypass by Alternate Name in Apache Tomcat
HTTP Request Smuggling in Apache Tomcat
Improper Handling of Exceptional Conditions in Apache Tomcat
Deserialization of Untrusted Data in Apache jUDDI
Denial of Service in Elasticsearch
Missing encryption in Apache Directory Studio
OS Command Injection in OpenTSDB
Prototype Pollution in GraphHopper
Cross-site Scripting in OWASP AntiSamy
Improper Handling of Length Parameter Inconsistency in Apache Ant
Improper Handling of Length Parameter Inconsistency in Apache Ant
Improper Handling of Length Parameter Inconsistency in Compress
Improper Handling of Length Parameter Inconsistency in Compress
Improper Handling of Length Parameter Inconsistency in Compress
Excessive Iteration in Compress
Buffer Overflow in Apache Mina SSHD
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.