Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersH2O Vulnerable to Execution of Arbitrary Files
H2O Vulnerable to Denial of Service (DoS) and File Write
H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
H2O Deserialization of Untrusted Data Vulnerability
Apache Seata Vulnerable to Deserialization of Untrusted Data
Apache Seata Vulnerable to Data Amplification
Spring Security Does Not Enforce Password Length
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
The WikiManager REST API allows any user to create wikis
XWiki allows unregistered users to access private pages information through REST endpoint
XWiki uses the wrong wiki reference in AuthorizationManager
Jenkins Zoho QEngine Plugin Displays Unmasked API Keys
Jenkins AnchorChain Plugin Has a Cross-Site Scripting (XSS) Vulnerability
Wire has Uncontrolled Recursion on Nested Groups
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Ed25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check
Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record
Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin
SmallRye Fault Tolerance out-of-memory (OOM) issue
Apache Camel Message Header Injection through request parameters
Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims
Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.