Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersLocalS3 XML Parser Vulnerable to XML External Entity (XXE) Injection
LocalS3 Project Vulnerable to XML External Entity (XXE) Injection via Bucket Tagging API
LocalS3 Project Bucket Operations Vulnerable to XML External Entity (XXE) Injection
LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection
Apache Camel: Camel Message Header Injection via Improper Filtering
com.xwiki.confluencepro:application-confluence-migrator-pro-ui's application homepage is public
com.xwiki.confluencepro:application-confluence-migrator-pro-ui Remote Code Execution via unescaped translations
Jenkins cross-site request forgery (CSRF) vulnerability
Jenkins Open Redirect vulnerability
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Emissary May Use a Broken or Risky Cryptographic Algorithm
OpenDJ Denial of Service (DoS) using alias loop
Lucee RCE/XXE Vulnerability
Apache Ranger Improper Neutralization of Formula Elements vulnerability
Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know.
Pebble has Arbitrary Local File Inclusion (LFI) Vulnerability via `include` macro
WSO2 incorrect authorization vulnerability
io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout
Solon Path Traversal
XWiki Platform allows remote code execution as guest via SolrSearchMacros request
Kwik hash collision vulnerability
Keycloak allows cross-site scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.