Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersIncorrect Access Control in Nacos
XML External Entity (XXE) Injection in JDOM
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in micronaut-core
Denial of Service in SheetJS Pro
Denial of Service in SheetsJS Pro
Denial of Service in SheetJS Pro
Encoded URIs can access WEB-INF directory in Eclipse Jetty
Allocation of resources without limits or throttling in keycloak-model-infinispan
A user without PR can reset user authentication failures information
No CSRF protection on the password change form
The reset password form reveal users email address
XXE vulnerability in Jenkins Selenium HTML report Plugin
Resource Exhaustion in Spring Security
API information disclosure flaw in Elasticsearch
Cached redirect poisoning via X-Forwarded-Host header
Ratpack's default client side session signing key is highly predictable
Unencrypted storage of client side sessions
Remote Code Execution Vulnerability in Session Storage
Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Reflected cross-site scripting in development mode handler in Vaadin
XXE vulnerability in Launch import
XXE vulnerability on Launch import with externally-defined DTD file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.