Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersAnt Media Server vulnerable to a local privilege escalation
Apache HugeGraph-Server: Command execution in gremlin
Apache HugeGraph-Server: Bypass whitelist in Auth mode
Apache HugeGraph-Hubble: SSRF in Hubble connection page
XWiki Platform CSRF remote code execution through scheduler job's document reference
XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet
WildFly Elytron: OIDC app attempting to access the second tenant, the user should be prompted to log
Apache Zeppelin: LDAP search filter query Injection Vulnerability
Apache Zeppelin: Cron arbitrary user impersonation with improper privileges
Apache Zeppelin: Denial of service with invalid notebook name
Apache Zeppelin: Replacing other users notebook, bypassing any permissions
Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE
Apache Zeppelin Path Traversal vulnerability
WildFly Elytron: SSRF security issue
Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints
Eclipse Vert.x vulnerable to a memory leak in TCP servers
Bonita cross-site scripting vulnerability
Eclipse Vert.x memory leak
Ignite Realtime Openfire privilege escalation vulnerability
Ignite Realtime Openfire privilege escalation vulnerability
Netty's HttpPostRequestDecoder can OOM
Improper Authentication in Spring Authorization Server
GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.