Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filtersSandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patterns
OpenMRS has Stored Velocity SSTI to RCE via ConceptReferenceRange
Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation
Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest
Apache Polaris has an Improper Input Validation issue
Apache Polaris has an Improper Input Validation Issue
Apache Polaris has an Improper Input Validation issue
Apache Polaris has an Improper Input Validation Issue
Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing
Apache Atlas has a Code Injection Vulnerability
OpenMRS Module Upload Vulnerable to Path Traversal (Zip Slip)
Quarkus has Authentication/Authorization bypasses
OpenMRS ModuleResourcesServlet has Path Traversal that Leads to Arbitrary File Read
jOpenDocument has an improper restriction of XML external entity reference vulnerability
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41409 Incomplete Fix)
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41635 Incomplete Fix)
Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API
Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization
Apache Neethi does not properly detect circular references in policy definitions.
Shopizer is vulnerable to Cross-site Scripting
Shopizer has a path traversal issue
Keycloak has a Forced Browsing issue
appsmith has SQL Injection in FilterDataService via Unsafe DROP TABLE Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.