Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 310
Reset filtersCross-site Scripting in Jenkins Rundeck Plugin
Deserialization of Untrusted Data in Spring AMQP
Cross-site Scripting in Apache Sling XSS Protection API
Crash when decoding malformed HTTP requests or malformed JSON payload
ONOS vulnerable to denial of service due to unrestricted NettyMessagingManager payload
Jenkins Vulnerable to Denial of Service (DoS) via Crafted Payload
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
Deserialization of untrusted data in Apache Cayenne
Arbitrary code execution in Magnolia CMS
Deserialization of Untrusted Data in Apache Dubbo
Gadget chain attack in Nippy
Out-of-bounds Write in Play Framework
Data Amplification in Play Framework
Cross-site Scripting (XSS) in Apache ActiveMQ Artemis
Infinite Loop in Apache Tomcat
Denial of Service by injecting highly recursive collections or maps in XStream
Infinite Loop in Apache Xerces Java
RCE in Mingsoft MCMS
A potential Denial of Service issue in protobuf-java
Default CORS config allows any origin with credentials
XStream can cause a Denial of Service
Prototype Pollution in GraphHopper
Remote Code Execution Vulnerability in Session Storage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.