Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersApache Ignite: Possible RCE when deserializing incoming messages by the server node
Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC
Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance
Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user
GeoNetwork search end-point information disclosure in response headers
Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log
Denial of Service attack on windows app using Netty
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Apache Felix Webconsole: XSS in services console
SQL injection in JeecgBoot
Apache James vulnerable to denial of service through the use of IMAP literals
Apache James vulnerable to denial of service through JMAP HTML to text conversion
Netplex Json-smart Uncontrolled Recursion vulnerability
Keycloak on Quarkus CLI option for encrypted JGroups ignored
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
Apache Cassandra: unrestricted deserialization of JMX authentication credentials
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Jenkins Zoom Plugin is Missing Password Field Masking
S3Proxy allows insecure path traversal in filesystem and filesystem-nio2 storage backends
WildFly improper RBAC permission
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
Jenkins Zoom Plugin Stores Sensitive Information in Cleartext
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.