Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersApache InLong Deserialization of Untrusted Data Vulnerability
Jenkins Gatling Plugin Vulnerable to Cross-Site Scripting (XSS)
Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language
Pekko Management may not properly apply authenticator when Basic Authentication is enabled
Erupt Unrestricted Upload of File with Dangerous Type vulnerability
WSO2 products vulnerable to Cross-site Scripting
WSO2 is vulnerable to Open Redirect through multi-option URL in its authentication endpoint
Para Server Logs Sensitive Information
WSO2 products vulnerable to privilege escalation due to business logic flaw in SOAP admin services
Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies
Apache Tomcat - CGI security constraint bypass
Apache Commons Improper Access Control vulnerability
Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users
Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read
Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass
Apache InLong: JDBC Vulnerability during verification processing
Fess has Insecure Temporary File Permissions
Eclipse JGit XML External Entity (XXE) Vulnerability
XWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right
Spring Security authorization bypass for method security annotations on private methods
Spring Framework DataBinder Case Sensitive Match Exception
Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
Jenkins Cadence vManager Plugin is Missing Permission Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.