Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filtersThere is a XML external entity expansion (XXE) vulnerability in Apache Solr
XML external entity expansion in org.apache.solr:solr-core
In blynk-server a Directory Traversal exists
Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
Apache Tika Server exposes sensitive information
Command injection in org.apache.tika:tika-core
Improper certificate validation in org.apache.httpcomponents:httpclient
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
Apache Ignite communicates to an external PHP server where sensitive information is sent
Improper Validation of Certificates in apache axis
Improper Input Validation in org.apache.qpid:qpid-broker
Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used
Apache Struts Improper Input Validation vulnerability
Access and integrity issue within Eclipse Jetty
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.