Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 546
Reset filtersImproper Neutralization of Wildcards or Matching Symbols
Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Ratpack
Cross-site scripting in Apache Archiva
Improper Input Validation in Apache Archiva
Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit
bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Cleartext Transmission of Sensitive Information in Apache nifi
Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms
Path traversal in org.springframework.integration:spring-integration-zip
Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
Deserialization of Untrusted Data in Bouncy castle
ZipSlip in org.apache.storm:storm-core
Bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.