Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersKeycloak Services has a potential bypass of brute force protection
druid-pac4j, Apache Druid extension, has Padding Oracle vulnerability
Apache Druid: Users can provide MySQL JDBC properties not on allow list
hermes-management is vulnerable to RCE due to Apache commons-jxpath
OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability
OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries
Apache Seata Deserialization of Untrusted Data vulnerability
Path traversal vulnerability in functional web frameworks
Eclipse Dataspace Components's ConsumerPullTransferTokenValidationApiController doesn't check for token validit
Eclipse Glassfish URL redirection vulnerability
Keycloak Denial of Service vulnerability
XWiki Platform document history including authors of any page exposed to unauthorized actors
Keycloak Open Redirect vulnerability
Keycloak has session fixation in Elytron SAML adapters
XXE vulnerability in XSLT transforms in `org.hl7.fhir.core`
H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
Vertx gRPC server does not limit the maximum message size
Missing hostname validation in Kroxylicious
Signature forgery in Spring Boot's Loader
Undertow vulnerable to Race Condition
Apache SeaTunnel SQL Injection vulnerability
Apache Helix Front (UI) component contained a hard-coded secret
apollo-portal has potential unauthorized access issue
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.