Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersApache IoTDB has an Improper Input Validation vulnerability
Apache ZooKeeper has improper handling of configuration values
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
org.eclipse.jetty:jetty-http has different parsing of invalid URIs
Cloudfoundry UAA has logic error in the token revocation endpoint implementation
Keycloak allows authentication using an Identity Provider (IdP) even after it has been disabled by an administrator
Keycloak SAML Broken has Authentication Bypass by Primary Weakness
The Eclipse Jetty Server Artifact has a Gzip request memory leak
pac4j-jwt: JwtAuthenticator Authentication Bypass via JWE-Wrapped PlainJWT
jackson-core has Nesting Depth Constraint Bypass in `UTF8DataInputJsonParser` potentially allowing Resource Exhaustion
XWiki Blog Application home page vulnerable to Stored XSS via Post Title
Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions
Apache ActiveMQ is Vulnerable to Integer Overflow or Wraparound
Apache Ranger has a Code Injection vulnerability
Apache Ranger Vulnerable to Improper Validation of Certificate with Host Mismatch
PMD Designer has Stored XSS in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages
jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition
Junrar has an arbitrary file write due to backslash Path Traversal bypass in LocalFolderExtractor on Linux/Unix
Keycloak REST Services has a WebAuthn Attestation Statement Verification Bypass
Keycloak Server Private SPI: Improper Access Control Allows Administrators to Bypass Attribute Visibility Restrictions and Modify Unmanaged User Profile Attributes
Snowflake JDBC Driver is Vulnerable to Uncontrolled Resource Consumption through SdkProxyRoutePlanner
PSI Probe: Broken access control can lead to DoS
PSI Probe vulnerable to Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.