Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersCross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser
Improper Access Control in commons-fileupload
Commons FileUpload Denial of service vulnerability
Path Traversal in Hadoop
Arbitrary Command Execution in Hadoop
Exposure of Sensitive Information in Hadoop
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main
Improper Privilege Management in Apache Karaf
Improper Authentication in Keycloak
XML External Entity (XXE) vulnerability in Square Retrofit
Directory Traversal vulnerability in Square Retrofit
High severity vulnerability that affects commons-fileupload:commons-fileupload
Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353
Remote Code Execution in esigate-core
XML External Entity (XXE) vulnerability in bw-calendar-engine
Cleartext Transmission of Sensitive Information in Apache nifi
Cross site scripting in org.apache.nifi:nifi
Apache NiFi Improper Input Validation vulnerability
Improper Restriction of Rendered UI Layers or Frames in Apache nifif
exist-db:exist-core XML External Entity (XXE) vulnerability
XML External Entity (XXE) vulnerability in codelibs fess
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.