Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filtersApache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks
Apache Camel's Mail is vulnerable to path traversal
Apache Ignite communicates to an external PHP server where sensitive information is sent
Improper Validation of Certificates in apache axis
Moderate severity vulnerability that affects org.apache.qpid:proton-j
Improper Input Validation in org.apache.qpid:qpid-broker
FasterXML jackson-databind allows unauthenticated remote code execution
Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator
Access and integrity issue within Eclipse Jetty
Moderate severity vulnerability that affects org.springframework:spring-core
Dom4j contains a XML Injection vulnerability
Bootstrap Cross-site Scripting vulnerability
Denial of Service in jquery
Cross-Site Scripting (XSS) in jquery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.