Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filtersApache Linkis arbitrary file deletion vulnerability
Apache Inlong Code Injection vulnerability
biscuit-java vulnerable to public key confusion in third party block
Elasticsearch stores private key on disk unencrypted
XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution
XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet
XWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader
XWiki Platform vulnerable to document deletion and overwrite from edit
Apache SeaTunnel Web Authentication vulnerability
GraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service
Elasticsearch Insertion of Sensitive Information into Log File
OpenAM FreeMarker template injection
Remote code execution in Spring Cloud Data Flow
Apache Pinot: Unauthorized endpoint exposed sensitive information
XML External Entity Reference (XXE) in the XML Format Plugin in Apache Drill
DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks
DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources
DNSJava DNSSEC Bypass
Apache Syncope Improper Input Validation vulnerability
Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data
H2O vulnerable to Deserialization of Untrusted Data
Apache CXF: SSRF vulnerability via WADL stylesheet parameter
Apache CXF allows unrestricted memory consumption in CXF HTTP clients
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.