Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersApache Parquet Avro Module Vulnerable to Arbitrary Code Execution
Apache Pinot Vulnerable to Authentication Bypass
Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type
Netty QUIC hash collision DoS attack
Solon Vulnerable to Path Traversal
Infinispan Potential Out of Memory Error via REST Compare API Buffer API
Apache Kylin Code Injection via JDBC Configuration Alteration
Apache Kylin Server-Side Request Forgery (SSRF) via `/kylin/api/xxx/diag` Endpoint
WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack
Keycloak Denial of Service (DoS) Vulnerability via JWT Token Cache
OpenDaylight SFC Allows Unauthorized Privileged Execution via Crafted Request
OpenDaylight SFC Insecure Shiro Cookie Configuration
OpenDaylight SFC Denial of Service (DoS)
Spring Security Vulnerable to Authorization Bypass via Security Annotations
Apache Commons VFS Has Relative Path Traversal Vulnerability
Apache Commons VFS Exposure of Sensitive Information to an Unauthorized Actor
aizuda snail-job Vulnerable to Deserialization via `nodeExpression` Argument
Apache Oozie Cross-Site Scripting (XSS)
Liferay Portal and Liferay DXP Reveals Data via Forms
Apache Druid vulnerable to Server-Side Request Forgery, Cross-site Scripting, Open Redirect
H2O Vulnerable to Arbitrary File Overwrite
H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.