Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersRead permissions not enforced for client provided filter expressions in Elide.
Local file inclusion vulnerability in http4s
Insufficient Nonce Validation in Eclipse Milo Client
Deserialization of Untrusted Data in jackson-databind
Deserialization of Untrusted Data in jackson-databind
HTTP Response Splitting in Styx
Potential HTTP request smuggling in Apache Tomcat
Potential HTTP request smuggling in Apache Tomcat
Remote Code Execution (RCE) vulnerability in dropwizard-validation
HTTP Request Smuggling in Netty
HTTP Request Smuggling in Netty
HTTP Request Smuggling in Netty
URL Redirection to Untrusted Site (Open Redirect) in Ktor
Improper Input Validation in Apache Solr
Improper Restriction of XML External Entity Reference in jackson-mapper-asl
Server-Side Request Forgery (SSRF) in Apache Olingo
Deserialization of Untrusted Data in Apache Olingo
Improper Restriction of XML External Entity Reference in Apache Olingo
Improper input validation in Apache Olingo
Improper input validation in Apache Shiro
XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))
Unauthenticated Access Via OAI-PMH
Password Hashing: Do not use MD5
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.